The Documents page centralizes all compliance documents required for your frameworks. It helps you track document status, assign owners, and align evidence with relevant frameworks to ensure audit readiness. By centralizing documents here, you can verify that every required document is complete, current, and accessible.
Main Page Features
Summary Panel
Completion – Shows the percentage of documents marked “OK.” For example, 0 % Documents OK might mean no documents have been reviewed yet. It also displays the number of documents meeting criteria versus the total (e.g., 0 of 417)
Assignment – A donut chart indicates how many documents are Completed vs. have No Evidence
app.dsalta.com. In the example, 0 documents are completed and 417 lack evidence.
Search & Filter
Search Bar – Allows you to search documents by name or keywords.
Framework Filter – A dropdown to filter documents by framework (such as ISO 27001:2022 or PCI DSS 3.2.1).
Add Document Button
Located near the top right of the summary panel, this button opens a form to upload or create a new document. You’ll specify the document name, framework, owner, and attach files as evidence.
Documents Table
Document Name – Title of the document or requirement.
Framework – Shows one or more frameworks to which the document applies.
Owner – An icon indicates if an owner has been assigned. Unassigned documents show a plus (or person) icon.
Status – Indicates whether evidence is attached. “No Evidence” means no supporting files have been uploaded.
Each row is clickable, opening a detailed view where you can manage evidence, link to controls, and add notes.
Floating Plus Button
At the bottom right, a green plus button may provide quick access to add new documents if permitted.
Typical Actions on the Main Documents Page
Find Documents – Use the search box to filter the list by keywords.
Filter by Framework – Narrow the list to show only documents relevant to a particular framework.
Sort Columns – Click on column headers (Document Name, Framework, Owner, Status) to sort ascending or descending.
Add a Document – Click Add Document and fill in the required details, attach evidence files, and save.
Open Document Details – Click a document row to view or manage its details.
Individual Document View
Clicking on a document opens a detailed pane. The example below uses the document “A process exists to identify and prioritize security vulnerabilities”
Header and Overview
Document Title – The name of the document or requirement.
Description – A detailed explanation of what the document should cover. In the example, it instructs you to document procedures for detecting, monitoring, and resolving vulnerabilities, including acceptable forms of evidence such as scan reports, records of monitoring external threat intelligence, and examples of remediation actions.
Source – Indicates where the requirement originates (e.g., DSALTA or an external standard).
Owner – Displays a button labeled Assign Owner. Click this to select the person responsible for maintaining the document.
Frequency – Tells how often the document should be reviewed or updated (e.g., Annual).
Results / Status – Shows whether evidence has been provided (e.g., “No evidence” or “Completed”).
Tabs in the Document Detail
Below the overview are tabs for managing evidence and related items:
Evidence
Files Count – Indicates how many files are currently attached. Initially, it may show “Files: 0.”
Add Files – A button that lets you upload or attach evidence files. This could include PDF documents, screenshots, reports, or any other proof that the documented process exists.
If there are no files, you’ll see a message like “Looks like there are no files here! When files are added, they will show up here”
Controls
Links controls that correspond to this document. When you click this tab, you’ll see a list of controls mapped to the document and can add or remove them. Linking controls demonstrates how the document supports compliance requirements.
Notes
Provides a space to record any additional comments or context related to the document, such as meeting notes, references to external policies, or comments from reviewers.
Common Actions within a Document
Assign an Owner – Click Assign Owner to select a person responsible for keeping the document current.
Upload Evidence – In the Evidence tab, click Add Files to upload proof of compliance, such as policies, procedures, or logs.
Map Controls – In the Controls tab, use an Add button (usually a plus icon) to link relevant controls. This shows auditors how the document supports various compliance requirements.
Add Notes – Click into the Notes tab to write comments, rationale, or instructions related to the document.
Set Status (Results) – Once evidence is attached and reviewed, update the status from “No evidence” to a completed state (if allowed). This may automatically update when you attach required files.
Additional Considerations
Permissions – Some actions, such as assigning owners or approving documents, may only be available to users with specific roles or permissions.
Review Schedule – Adhere to the “Frequency” field to ensure documents remain up‑to‑date. Set reminders to review and update documents as needed.
Consistency – Use consistent naming conventions for documents to make searching and filtering easier.
Audit Prep – Keep evidence organized and linked so that it’s easy to demonstrate compliance during audits. Documents with “No evidence” status indicate that proof is missing and should be addressed.
