Skip to content
Varmo
DeutschSign inRequest a demo
INTEGRATIONS · CSV IMPORT

Bring in existing lists without retyping.

Is your risk register, your list of measures or your inventory in Excel? Varmo imports the entries from a CSV file – with a preview before the import.

  • Included from the Starter plan
  • Preview before the import
  • Undo for each import
Excel / CSV file
  • UTF-8 or Windows-1252
  • up to 5 MB
  • 10,000 rows
Upload file
Varmo
  • Risks
  • Measures
  • Exceptions
  • Assets
  • Findings
Flows:
  • Mapped columns
  • People by email
Not:
  • People without access
  • the file (is deleted)
AT A GLANCE

From Starter, Varmo imports risks, measures, exceptions, assets and findings from CSV files (UTF-8 or Windows-1252, up to 5 MB and 10,000 rows) with column mapping, a preview, conflict detection for repeated imports and undo for each import.

Request a demoTry it free

Requirements

  • Plan: Varmo Starter, Pro or Ultimate
  • In Varmo: “Manage integrations” and “Import data”, plus the right for the target (e.g. record risks)
  • File: CSV file: first row with the column names, every further row one entry

By default, the ISMS managers have these rights in Varmo.

4 STEPS

Setup

  1. Step 1: Prepare the file

    Save the list in Excel as “CSV UTF-8” and check the requirements below.

    Menu path: File › Save As › CSV UTF-8 (Comma delimited)

    Requirements for the file

    • What: FormatRequirement: CSV UTF-8; Windows-1252 (older Excel exports) is also recognised
    • What: DelimiterRequirement: Semicolon, comma or tab
    • What: SizeRequirement: at most 5 MB and 10,000 rows
    • What: IDRequirement: a column with a unique ID for each row, e.g. the number in your previous tool
    • What: DateRequirement: 2026-10-04 or 4.10.2026
    • What: PeopleRequirement: Email address
    • What: Multiple valuesRequirement: e.g. affected assets, separated by commas or semicolons
    Details
    • Required columns: risks, measures and exceptions need a title, assets a name and a category, findings a title and a description.
    • Varmo uses the ID to recognise what is already there in a later import.

  2. Step 2: Create the connection and choose the target

    Add the “CSV file” integration, choose “Import data”, select the target and upload the file.

    Menu path: ISMS settings › Integrations › “Add integration” › CSV file

    Targets:RisksMeasuresExceptionsAssetsFindings

  3. Step 3: Map columns, values and people

    Choose the column with the ID and the matching column for each field; Varmo suggests columns with the same name.

    Result: The mapping is saved for the next import.

    Details
    • People: Varmo maps members’ email addresses itself; you map other names to a member or leave the field empty. Varmo does not store the names of people without access.
    • Instead of a column, you can also use a fixed value for all rows.
    • Values: map choice fields (e.g. “Status” or “Category”) to the values in Varmo, such as “open” → “Planned”.

  4. Step 4: Check the preview and import

    The preview shows what happens to each row; then “Start import”.

    Result: The import runs in the background; you see its progress and then a report.

    Details
    • For each row, the preview shows: new, unchanged, updated, conflict, protected, invalid (with the reason) or no longer in the file.
    • Invalid rows are not imported; correct them in the file and import again.

How entries arrive

Measures
at most as “In progress”
Risks
as an unreviewed report
Exceptions
as a draft
Assets
as a proposal: in the inventory only once accepted (notice in the inventory and as a task)

No import ever grants an approval.

Protected
An import never changes what has already been reviewed, implemented or approved in Varmo.
Conflict
Changed in both systems: the version in Varmo applies until the ISMS manager decides.
Undo
Every import: new entries are deleted, updated ones are reset – unless they have been changed in Varmo since.
Logged
Everything runs with your permissions and the rules of Varmo, just as if done by hand, and appears in the change log.
Repeated imports and special cases
  • The file is deleted after the import.
  • Entries deleted in Varmo are not created again.
  • The entry’s page shows any conflict. The ISMS manager decides which version applies, there or under “Open conflicts”.
  • Repeated imports recognise every entry by its reference: changed entries are updated, unchanged ones stay as they are.
  • If an entry is missing from the next import, Varmo reports it as “no longer present” but deletes nothing.

If something doesn’t work

Umlauts or accents are garbled (e.g. “ä”)

Save as “CSV UTF-8” in Excel.

Everything is in one column

Check the delimiter (semicolon, comma or tab) and the first row with the column names.

“The ID is missing”

Each row needs its own unique ID. The same applies to the message “appears more than once in the file”.

Invalid date

Use the format 2026-10-04 or 4.10.2026.

Import is not included in your plan

CSV import is available from Starter.

Frequently asked questions

Which data can be imported from CSV?

Risks, measures, exceptions, assets and findings, from the Starter plan. The file may have up to 5 MB and 10,000 rows, in UTF-8 or Windows-1252.

What happens if I import the same list again later?

Varmo recognises each row by its ID: unchanged rows stay as they are, changed rows are updated. If an entry has also been changed in Varmo since the last import, a conflict arises; the ISMS manager decides which version applies.

Can I undo an import?

Yes, any import. New entries are deleted and updated ones are reset, unless they have been changed in Varmo since.

How close are you to ISO/IEC 27001?

In a personal demo, we show you the way to the readiness report, with no obligation. Or try it free for 30 days with every feature.

Request a demoTry it free