Managing Framework Updates

Manage and apply system updates to your library controls, evidence tasks, and frameworks with ease. You can now use the new Framework updates screen in Compliance Automation and IT Risk Management to selectively apply updates that matter most to your organization. This streamlined process enhances governance, increases flexibility, and reduces overhead by allowing you to adopt only the relevant changes. These updates are based on recommendations from the GRC Labs Team and helps your organization stay aligned with evolving frameworks and industry standards.

To manually move existing frameworks to apply updates

Before applying updates to existing frameworks added to your Standards & frameworks library, you must manually move the the framework to the Framework updates screen using these steps.

  1. On the IT Risk Management menu, select Standards and frameworks > Frameworks library.
    The Standards & frameworks screen appears.
    Note:

    This can also be accessed from the Compliance Automation menu.

  2. Click the Context Menu icon on an existing standard or framework that has been updated by OneTrust. Standards and frameworks with a pending update will display the icon.


  3. On the Context menu, select Update framework.

    The Framework updates screen appears and will display the current updates for that specific framework.

  4. Repeat steps 1 - 3 as needed to add framework updates for your existing standards and frameworks to the Framework updates screen.

To apply system updates



  1. On the IT Risk Management menu, select Standards and frameworks > Framework updates.
    Note:

    This can also be accessed from the Compliance Automation menu.

    The Framework updates screen appears.

  2. Click the Review link in the Action column for the update you would like to apply.

    The Review update: New version available modal appears.

  3. Review the latest updates. You can click the link to the updated library control, evidence task, or framework in the modal to view the record details.

  4. Click the checkbox to confirm you understand applying the changes will overwrite any custom changes.
  5. Click the Apply updates button. This will remove the record from the Framework updates screen and update the record.

To skip system updates

  1. On the IT Risk Management menu, select Standards and frameworks > Framework updates.
    The Framework updates screen appears.
    Note:

    This can also be accessed from the Compliance Automation menu.

  2. Click the Review link in the Action column for the update you would like to skip. modal appears.

    The Review update: New version available modal appears.

  3. Review the latest updates. You can click the link to the updated library control, evidence task, or framework in the modal to view the record details.

  4. Click the Skip updates button to skip the changes. This will remove the record from the Framework updates screen and move it to the Skipped framework updates screen.

To view skipped updates

  1. On the IT Risk Management menu, select Standards and frameworks > Framework updates.
    The Framework updates screen appears.
    Note:

    This can also be accessed from the Compliance Automation menu.

  2. Click the View skipped updates link on the Framework updates screen.
    The Skipped framework updates screen appears.

To apply updates to previously skipped updates

  1. On the IT Risk Management menu, select Standards and frameworks > Framework updates.
    Note:

    This can also be accessed from the Compliance Automation menu.

    The Framework updates screen appears.

  2. Click the View skipped updates link on the Framework updates screen.

    The Skipped framework updates screen appears.

  3. Click the Review link in the Action column for the update you would like to apply. modal appears.

    The Review update: New version available modal appears.

  4. Review the latest updates. You can click the link to the updated library control, evidence task, or framework in the modal to view the record details.
  5. Click the checkbox to confirm you understand applying the changes will overwrite any custom changes.
  6. Click the Apply updates button. This will remove the record from the Skipped framework updates screen and update the record.