Splitting Control Implementations and Evidence Tasks

You can split control implementations and evidence tasks when a single record no longer meets the needs of multiple frameworks, business units, or owners. Splitting allows you to create distinct records with tailored language, ownership, or evidence requirements.

To split control implementations

In some cases, you may have a control implementation that is linked to many different inventories. Use the split control implementation flow to split the single control implementation (and evidence) into individual control implementations, one for each inventory linked to the shared control.

  1. On the IT & Security Risk Management menu, select Libraries > Control Library.
    The Control library screen appears.
    Note:

    Shared Controls Access

    Currently, you can access the Shared Controls feature from IT & Security Risk Management and Compliance Automation.

  2. Open the control in which you want to split controls.

    The Control Library Details screen appears.

  3. Select the Implementations tab to view any active implementations for the control. 
  4. Click the checkbox next to the implementation you would like to split and click the icon.
    The Review split details screen appears.

    Note:

    This icon only appears if there's a single implementation for multiple objects.

    You can also access this screen by clicking the Context Menu icon Implementations tab list screen and selecting Split Implementation. 

  5. Review the implementation details that are set to be split.
  6. Click the Split implementation button to create multiple implementations for each inventory associated with it. 

To split evidence tasks

In some cases, you may have evidence tasks linked to many different inventories. Use the split evidence tasks flow to split the single evidence task into different evidence task implementations that you can manage separately. When evidence tasks are split, each inventory maintains its own evidence implementation.

Adding inventories

When a related inventory is added, a new evidence implementation is created. If an evidence implementation already exists for that inventory, it is reused and linked.

Removing inventories

When the related inventory is removed, the link between the control implementation and the evidence implementation for that inventory is removed. If no other control implementations are using that evidence, it can be deleted.

  1. On the IT & Security Risk Management menu, select Libraries > Control Library.
    The Control library screen appears.
    Note:

    Shared Controls Access

    Currently, you can access the Shared Controls feature from IT & Security Risk Management and Compliance Automation.

  2. Open the control in which you want to split evidence tasks.

    The Control Library Details screen appears.

  3. Select the Implementations tab to view any active implementations for the control. 
  4. Click the link in the Implementation ID field for the control implementation in which you want to split evidence tasks.

    The Control Details screen appears.

  5. Select the Evidence Tasks tab. 
  6. Hover over the row for a task in the In Progress or Collected status until the Context Menu icon appears.
  7. Click the Context Menu icon and select split evidence task.


  8. Review the evidence tasks that will be split. 
  9. Click the Split evidence button to create individual evidence tasks based on the inventories that are currently linked to the control implementation.