Linking Controls to Privacy Notices

You can add related controls and control implementations to a privacy notice. The records you relate to the notice will also be added to related inventories.

Linking controls and control implementations to a privacy notice provides alignment between documented intent and operational execution. It also supports change management by allowing organizations to assess the impact of notice updates on related controls to help strengthen your organization’s governance, risk, and compliance posture.

To add controls to privacy notices

  1. On the Privacy Notice Management menu, select Privacy Notices.
    Note:

    If you own the Policy Management module, the menu will be named Policy.

    The Privacy Notices screen appears.

  2. Select the notice in which you would like to add related controls.

    The Privacy Notice Details screen appears.

  3. Select the Controls tab.

    Controls tab in the Privacy Notice Details screen
  4. Click the Add Controls button.

    The Add Controls modal appears.


    Add Controls modal
  5. Select the standard/framework(s) that you would like to link to the privacy notice.
  6. Check the box next to Include control implementations to add risks associated with the implementations to the Risks tab of the notice.
  7. Click the Add button to add the controls and return to the Controls tab. Adding control implementations may take a few moments.
    Tip:

    You can click the Refresh icon icon to refresh the screen and update the table of related controls and control implementations.

To remove privacy notice controls and control implementations

You can remove controls and control implementations from privacy notices when they are no longer applicable.

Tip:

You can use the search bar to easily locate controls associated with the notice.

  1. Select the privacy notice in which you would like to remove related controls or control implementations. The Details screen appears.

  2. Select the Controls tab.
  3. Hover over the row for the item you want to remove and click the Context Menu icon button.
  4. On the Context menu, select Remove Control or Remove Control Implementation. The confirmation modal appears.
    Tip:

    If removing controls, the control, its framework, and all associated implementations will be removed.

    If removing control implementations, the modal will display the number of implementations being removed. The frameworks associated with the implementations will also be removed. The risks inherited with control implementations will not be unlinked/removed.

  5. Click the Confirm or Remove Control Implementation button.