Issues with the GRC UCF ImportIssue The import has a different total number of policy statements than UCF shows If ServiceNow imports all controls including what UCF describes as implied common controls in addition to the mandated common controls, why doesn't ServiceNow include a field in the table descriptive field to identify implied or mandated? Is that up to HRB to modify the table, UI actions, UI policy etc?Why does ServiceNow import and display by default the UCF root entry (Policy Statement reference ID 00000)? ResolutionServiceNow shows all of the Active=True and False policy statements. After filtering out the Active = False Policy Statements, the numbers matched. You can change the Active field on the Policy Statements by turning off the "All the fields from UCF should be read-only" UI Policy (admin only) so you can edit that flag.