Frameworks, controls & tests
Add an implementation control from requirements
Create a control tied to existing organization requirements and describe the work it represents.
Before you start
Who this is for: Users with permission to create controls.
- Enable the relevant framework so organization requirements exist.
- Search existing controls first to avoid creating the same implementation twice.
Follow these steps
Start from the right context
Open Controls and use the available new-control action. An existing control detail may also offer Add control with its requirements preselected. Review that starting context rather than assuming the new control should inherit every relationship.
Describe the implementation
Enter the Control ID, Name, and the available Domain, Description, and Note fields. Use a name that explains the activity your organization performs. For example, a recurring access review should describe the review process and its scope rather than merely repeat a framework title.
Select requirements
Use Filter requirements to find the requirements this control addresses. Select the appropriate entries under their framework groups. At least one requirement must be selected. Check the framework and requirement wording before saving; a similar keyword is not sufficient justification for coverage.
Save and verify relationships
Submit the form, then open the created control. Inspect its Frameworks section and implementation information. Plan supporting tests or evidence through the available workflows. Creation records the control and its mappings; implementation status and evidence still need their own work.
What you should see
A new organizational control exists with explicit links to the selected framework requirements.
If something doesn’t look right
No enterprise requirements are available
Use Add framework first, or ask an authorized administrator to enable the intended framework.
The save action is disabled
Check required fields and ensure you selected at least one requirement.
An equivalent control already exists
Review that record with the program owner before adding another. Shared implementation may already cover the requirements you selected.
Still need a little help?
Ask the assistant about these steps, or tell our team where you got stuck.
Contact support