Skip to main content

Work with controls

Where: Dashboard → Compliance → Controls, or open Company Controls.

A control passes when all of its tests are completed; otherwise it is to do. See Complete a compliance test.

Find a control​

  • Search by control title or description.
  • Filter by Frameworks and Status, or pick a group under Requirement Categories.
  • The Active tab lists controls in scope; Out of Scope lists the ones you excluded.

Click a control to open its details: description, Frameworks, and Control Tests. Use Show Tests on a card to see its tests inline.

Mark a control out of scope​

  1. Open the control, or select several controls in the list.
  2. Click Mark Out of Scope and confirm.

Out-of-scope controls are excluded from compliance testing, and the change is logged for audit. If the control was linked to a risk, the link is removed and the risk may go back to incomplete, so review related risks.

To bring controls back, open the Out of Scope tab and click Reactivate.

Add a test to a control​

  1. Open the control and click Create Test (under Control Tests).
  2. Enter the Title, Description, Status, Owner, Departments, and optionally the Evidence description and Evidence attachment.
  3. Click Create Test.

You can't add tests to a control that is out of scope.

Create your own controls​

  1. On the Controls page, click Create New Control.
  2. Choose Create Single Control to fill in one control (Framework, Group, Title, Code, Description, then Create Control), or Create Bulk Control to import many from an Excel or CSV file (use Click here to download the template).

Groups use the CODE Title format, for example CC.CC Company Governance.