Merging Control Implementations and Evidence Tasks

You can merge control implementations that serve similar purposes. Merging records allow you to consolidate control implementations and evidence tasks to reduce duplication and streamline control management.

To merge control implementations

In some cases, you may have multiple implementations of the same control that you want to manage centrally. In this case, you can choose the control implementations you want to merge into a single implementation to help clean-up controls. These controls will be merged into one implementation that applies to the inventory.







This image shows what happens to the evidence tasks if you choose to not merge.

  1. On the IT & Security Risk Management menu, select Libraries > Control Library.
    Note:

    Shared Controls Access

    Currently, you can access the Shared Controls feature from IT & Security Risk Management and Compliance Automation.

    The Control library screen appears.

  2. Open the control in which you want to merge controls.

    The Control Library Details screen appears.

  3. Select the Implementations tab to view any active implementations for the control. 
  4. Click the checkbox next to the implementations you would like to merge and click the icon.
    The Select a primary control implementation step appears.

  5. Choose the primary record that will be the source of the control. You can use the search field to search for an inventory by name or ID.
    Note:

    This is the control implementation that will remain once the merge has completed and the content from the other control implementations will be merged into it. 

  6. Click the Next button.
    The Merge evidence screen appears.

  7. If evidence tasks exists on this record, you can click the checkbox next to the evidence task you would like to merge into the selected primary control implementation. 
    Note:

    Any evidence tasks that you do not select will remain as separate evidence task implementations for each inventory on the shared control.

    When inventories are added and removed from the implementation, they are also added or removed from the shared evidence task.

  8. Click the Next button.
    The Review merge details screen appears.

  9. Review the implementation details that are set to be merged.
  10. Click the Finish merge button. This will allow you to have fewer control implementations since the controls have been merged together. 
    Note:

    All risks and issues will be listed on the implementation. The evidence task will show the items that could not be merged vs the implementations that have been merged together.

    • Relationships to inventory, risks, issues, and compliance initiatives will be merged into the implementation. Attachments and tasks are also copied into the merged implementation.

    • Attribute values, assessments, activity logs, comments, and workflow stage are not merged.

To merge evidence tasks

In some cases, you may have multiple implementations of the same evidence task that you want to manage centrally. In this case, you can choose the evidence you want to merge into a single implementation to help clean-up evidence tasks. These evidence tasks will be merged into one implementation that applies to the inventory.

  1. On the IT & Security Risk Management menu, select Libraries > Control Library.
    The Control library screen appears.
    Note:

    Shared Controls Access

    Currently, you can access the Shared Controls feature from IT & Security Risk Management and Compliance Automation.

  2. Open the control in which you want to merge evidence tasks.

    The Control Library Details screen appears.

  3. Select the Implementations tab to view any active implementations for the control. 
  4. Click the link in the Implementation ID field for the control implementation in which you want to merge evidence tasks.

    The Control Details screen appears.

  5. Select the Evidence Tasks tab. 


  6. Click the Merge evidence tasks link in the information banner to open the Merge duplicate evidence tasks modal. 
    Note:

    You can also click the Context Menu icon next to the Add Evidence Task button and select Merge evidence to access the Merge duplicate evidence tasks modal. 



  7. Click the checkbox next to the evidence tasks you would like to merge. 
  8. Click the Merge evidence button to merge the evidence task into the primary control implementation. Now, you can collect evidence once for all related inventories.