Welcome to MOSP Discussions!

[cedricbonhomme]

👋 Welcome!

We’re using Discussions as a place to connect with other members of our community. We hope that you:

• Ask questions you’re wondering about.
• Share ideas.
• Engage with other community members.
• Welcome others and are open-minded. Remember that this is a community we build together 💪.

[Tichod]

Hello.

I'm a recent MONARC user.
I'll start with two questions, which I do not know where to ask. I hope this is the right place.

1. I prepared two recommendation sets, in CSV format, ready to import in MONARC knowledge base:

• one corresponding to the French "Guide d'hygiène informatique/42 règles" by ANSSI;
• one corresponding to the recent CIS Controls v8.

I'm wondering if it would be interesting to import them into MOSP. I f yes, I do not know how to do it.

2. I suggest to rename the ISO 27002 recommendation sets to include the version (I think it may be 2013), given that version 2021 will be published in a couple of months.

Regards!

[cedricbonhomme]

Hi,

It's the good place, you could even create a new discussion ;-)

MOSP deals with JSON objects.

You can use it's documented API:
https://objects.monarc.lu/api/v2/
For your information, MONARC is using this API (for the import of recommendations, security standards, etc.).

You have an example on how to create an object with this API here:
https://www.monarc.lu/documentation/MOSP-documentation/api-v2.html#create-a-new-object

There is also a Python client, PyMOSP, which could ease a bit the work.
Here is an example for the creation of an object:
https://github.com/CASES-LU/PyMOSP/blob/master/tests/test_object.py#L33-L50

The main work for you is to generate a JSON file from your CSV file.
The object corresponding to a recommendation looks like this:
https://objects.monarc.lu/object/view/5199
Basically you must simply generate a list of values and put it in a JSON with few other fields.

What I could do is to create a kind of helper in PyMOSP in order to create an object from a CSV given in parameter. At the end it will also use add_objects.

As you can see, when you submit a JSON file (via the API or PyMOSP), you must also submit schema_id: the id of the schema on MOSP which is supposed to validate the object.
It is because MOSP will first test if the object you want to push is valid. If yes, it will be stored.

Your second point is not related to MOSP, but it's noted ;-) Thank you.

[Tichod]

Thank you again for your kind patience, Cédric!

But the file at the URL you mention is wrong (incomplete codes, my error).
Once the file format is fully OK (quotes, encoding,...), how am I supposed to feed it?
Do I copy/paste all values within the "JSON Output" zone, then click on the "save the object" icon?

[Tichod]

IT WORKED! All in all, my source file contained hard to find errors. Once it's OK, I know how to do it now.
I thank you VERY much for your kind help.
I'll quickly upload another recommendation set based on ANSSI's guide d'hygiène.

[cedricbonhomme]

Ahah, excellent I was about to reply to your previous email.

Yes, it is not easy to spot small mistakes in a big JSON file. I used a web checker for the previous version of your file.

Let me know if I must create an organization for you (like S3cN3tSys). A user can be part of several orgs on MOSP.

[Tichod]

OK. I'll check with my employer, to assess with it if it would be a good idea to request an organization for us.

[cedricbonhomme]

How you want. Thank you very much for the contributions !