Configuring Control Profiles

A Control Profile is a configurable set of rules used to automatically assign controls to inventory records based on predefined conditions. These profiles function similarly to automation rules, allowing organizations to streamline and standardize the application of controls across their asset inventory.

Control Profiles help ensure that appropriate controls are consistently applied based on attributes such as asset type, location, classification, or other metadata. This reduces manual effort, enhances compliance, and improves risk management by ensuring that all relevant assets are governed by the correct control measures.

Note:

This IT & Security Risk Management feature is available to OneTrust customers with an Enterprise license.

Key Features

Rule-Based Logic

 Define conditions that trigger the automatic assignment of controls.

Automation

 Reduces manual intervention by applying controls dynamically as inventory records are created or updated.

Scalability

 Easily manage controls across large and complex inventories.

To create a Control Profile

  1. On the IT & Security Risk Management menu, select Control Profiles.

    The Control Profiles screen appears.

  2. Click the Create Control Profile button.
    The Create Control Profile modal appears.

    Field
    Description
    Name

    Enter a name for the Control Profile.

    Organization

    Select the organization associated with the Control Profile.

    Description

    Enter a brief description of the Control Profile.

  3. Click the Create button.
    The Control Profile Details screen appears.
    Tip:

    The Control Profile Checklist provides a list of the required configurations needed to complete the profile. This checklist will appear on the Details tab of the Control Profile Details screen.



To edit a Control Profile

  1. Open the Control Profile in which you would like to edit.

    The Control Profile Details screen appears.

  2. On the Control Profile Details screen, click the field you would like to edit to directly edit an entry. Currently, the fields available to edit includes:

    • Name

    • Description

    • Organization

  3. Click the Save button.

To delete a Control Profile

  1. On the Control Profile Details screen, click the Delete button.
    The Delete Control Profile modal appears.
    Note:

    The Control Profile can also be deleted using the Context menu on the Control Profiles list screen.



  2. Click the Confirm button.

To add Control Profile rules

  1. Open the Control Profile in which you would like to add rules.

    The Control Profile Details screen appears.

  2. Select the Rules tab or click the Start button on the Control Profile Checklist.
  3. Click the Add Rule button.
    The Select Inventory Type modal appears.

  4. Select the inventory type the rule will affect and click the Continue button.

    The rules configuration screen appears.

  5. Complete the fields. For more information, see Control Profile Rule Configuration.
  6. Click the Save button to save the rule.

Control Profile Rule Configuration

You can create rules on Control Profiles to automatically create new control implementations or to automatically link existing control implementations to inventories based on defined conditions. You can create multiple rules on a single profile.





Field
Description
Rule Name

Enter a name for the rule.

Frequency Run

Select how often the action will occur.

Conditions
If you select ANY, the stage rule will be initiated if any one of the conditions are met.
Note:

This option only appears if you add more than one condition block to rule.

If you select ALL, the stage rule will only be initiated if all of the conditions are met.
Note:

This option only appears if you add more than one condition block to rule.

Condition Block

Trigger: Select the option that will trigger the rule.

Attribute: Select the attribute type that will trigger the rule's action.

The attribute field is only available when the Attribute trigger type is selected.

The attributes available in the drop-down are dependent on the inventory type that was selected. For example, if you have selected the Asset inventory type, only asset attributes will be displayed.

Operator: Select the relationship that must be met between the field and the value.
Value: Select which field value triggers the rule.
Add Condition Block

Click the Add Condition Block button to add more conditions to the workflow stage rule.

Actions

Option 1: Select Create New Control Implementations. Click the Add library control button to select the controls that will be added to the inventory when the conditions are met.

Option 2: Select Adding Existing Control Implementations. Click the Add implementations button to select the existing control implementations that will be added to the inventory when the conditions are met. This is part of the Control Profile Shared Control Implementation feature.

To edit Control Profile rules

  1. On the IT & Security Risk Management menu, select Control Profiles.

    The Control Profiles screen appears.

  2. Open the Control Profile in which you would like to edit rules.

    The Control Profile Details screen appears.

  3. Select the Rules tab.
  4. Click the Context Menu for the rule you want to edit.
  5. On the Context menu, select Edit.
  6. Edit the Control Profile rule as needed.
  7. Click the Save button.

To delete Control Profile rules

  1. On the Control Profile Details screen, select the Rules tab.
  2. Click the Context Menu for the rule you want to delete.
  3. On the Context menu, select Delete.
    The Delete Rule modal appears.

  4. Click the Confirm button.

To run rules

Note:

The Control Profile rules will not execute if there has been no change to the rule or inventory since the last rule execution.

Running Single Rules

  1. On the Control Profile Details screen, select the Rules tab.
  2. Click the Context Menu for the rule you want to run.
  3. On the Context menu, select Run Rule Now.

    The Run Rule modal appears.

  4. Click the Run Rule button to run the rule without waiting for the next scheduled rule execution.
  5. Select the Execution Results tab to view the outcome of running the single rule.

Running Active Control Profile Rules

Active Control Profile rules can be triggered in two ways. First, the system will automatically execute the rules based on the configured frequency. Second, users can run the Control Profile rules as needed by using the Run Now button. To use the Run Now function, follow the steps below.

  1. On the Control Profile Details screen, click the Run Now button.
    The Run Control Profile Now modal appears.
    Note:

    The Control Profile rules can also be ran using the Context menu on the Control Profiles list screen.



  2. Click the Yes button.
    Note:

    Only the active rules will be executed.

  3. Select the Execution Results tab to view the outcome of running all active rules on the Control Profile.

To view Execution Results and the Control Details pane

The Execution Results tab can be used as an audit trail to help track the execution results. The execution results display the outcome of running rules based on the configured frequency run and the Run Now function.

Note:

The Execution Results tab can be sorted and filtered by Execution Date, Rule, Controls, and Object Type.

The Control Details pane allows you to view

  1. On the Control Profile Details screen, select the Execution Results tab.
    The execution details appear.

  2. Click the control count in the Controls added column.
    The Control Profile Details pane appears and displays relevant control information to help understand which controls have been automatically added to an object based on the rules configured.