Controls
Controls are the security measures you run, each with a type, status and effectiveness, mapped to the framework requirements they help meet.
Browse your controls
| Column | Values |
|---|---|
| Type | Preventive, Detective, Corrective, Directive |
| Status | Planned, Implemented, Testing, Effective, Ineffective |
| Effectiveness | High, Medium, Low, Unknown |
| Mappings | View and the number of mapped requirements, or — when there are none |
Search by name, or filter by Type, Status, Effectiveness or tag.
Add or change a control
- Select Add Control, or open a row's menu and select Edit.
- Set the Type, Status and Effectiveness, then select Create or Update.
To change several at once, tick the rows and use Set Status, Set Effectiveness, Set Type or Edit tags.
Claimed, validated, gap and managed are requirement scores; see score an assessment.
See which requirements a control covers
- Select View in the Mappings column. Mapped requirements lists each one as Met, Partial or Not met.
- To remove a mapping, select its unlink icon.
To add a mapping, open the requirement under Compliance › Frameworks and select Link a control. Choose the Control, a Status of Met, Partial or Not met, and optional Notes.
Did this answer your question?
Frameworks
Frameworks are the standards your project is assessed against: ISO 27001, NIST CSF, Essential Eight and others from the catalogue, or a custom framework you bring.
Templates
Templates holds the reusable parts of policies and reports: policy and report templates, the vulnerability library, sections, variables and branding.