@@ -233,6 +233,15 @@ export const MyOpenCRE = () => {
233233 < Container className = "myopencre-container" >
234234 < Header as = "h1" > MyOpenCRE</ Header >
235235
236+ < p className = "myopencre-intro" >
237+ MyOpenCRE allows you to map your own security standard (e.g. SOC2) to OpenCRE Common Requirements
238+ using a CSV spreadsheet.
239+ </ p >
240+
241+ < p className = "myopencre-intro" >
242+ Start by downloading the CRE catalogue below, then map your standard’s controls or sections to CRE IDs
243+ in the spreadsheet.
244+ </ p >
236245 < div className = "myopencre-section" >
237246 < Button primary onClick = { downloadCreCsv } >
238247 Download CRE Catalogue (CSV)
@@ -241,7 +250,29 @@ export const MyOpenCRE = () => {
241250
242251 < div className = "myopencre-section myopencre-upload" >
243252 < Header as = "h3" > Upload Mapping CSV</ Header >
253+ < Message info className = "cursor-pointer" >
254+ < details >
255+ < summary >
256+ < strong > How to prepare your CSV</ strong >
257+ </ summary >
244258
259+ < ul >
260+ < li > Start from the downloaded CRE Catalogue CSV.</ li >
261+ < li >
262+ Fill < code > standard|name</ code > and < code > standard|id</ code > for your standard.
263+ </ li >
264+ < li >
265+ Map your controls using CRE columns (< code > CRE 0</ code > , < code > CRE 1</ code > , …).
266+ </ li >
267+
268+ < li >
269+ CRE values must be in the format < code > <CRE-ID>|<Name></ code >
270+ < br />
271+ < em > Example:</ em > < code > 616-305|Development processes for security</ code >
272+ </ li >
273+ </ ul >
274+ </ details >
275+ </ Message >
245276 { renderErrorMessage ( ) }
246277 { info && < Message info > { info } </ Message > }
247278 { success && (
0 commit comments