Linking Controls to a Document

You can add related controls and control implementations to a document, such as a policy, standard, or procedure. The records you relate to the document will also be added to related inventories.

Linking controls and control implementations to a document provides alignment between documented intent and operational execution. It also supports change management by allowing organizations to assess the impact of document updates on related controls to help strengthen your organization’s governance, risk, and compliance posture.

To add related controls to documents

  1. On the Policy menu, select Standards, Policies, or Procedures.
  2. Select the document in which you would like to add related controls.

    The Details screen appears.

  3. Select the Controls tab.


  4. Click the Add Controls button.
    The Add Controls modal appears.

  5. Select the standard/framework(s) that you would like to link to the document.
  6. Check the box next to Include control implementations to add risks associated with the implementations to the Risks tab of the document.
  7. Click the Add button to add the controls and return to the Controls tab. Adding control implementations may take a few moments.
    Tip:

    You can click the icon to refresh the screen and update the table of related controls and control implementations.

To remove document controls and control implementations

You can remove controls and control implementations from documents when they are no longer applicable.

Tip:

You can use the search bar to easily locate controls associated with the document.

  1. Select the document in which you would like to remove related controls or control implementations.

    The Details screen appears.

  2. Select the Controls tab.
  3. Hover over the row for the item you want to remove and click the Context Menu icon button.
  4. On the Context menu, select Remove Control or Remove Control Implementation.
    The confirmation modal appears.
    Tip:

    If removing controls, the control, its framework, and all associated implementations will be removed.

    If removing control implementations, the modal will display the number of implementations being removed. The frameworks associated with the implementations will also be removed. The risks inherited with control implementations will not be unlinked/removed.

  5. Click the Confirm or Remove Control Implementation button.