Managing and Mapping Controls

Effective control management is key to maintaining compliance. DSALTA provides tools to organize, track, and map controls efficiently across multiple frameworks.

Navigate to Compliance > Controls to view all controls across your active frameworks. This centralized view shows every security requirement you need to implement.

The controls list displays:

Control ID: Framework-specific identifier (e.g., CC6.1, A.9.2.1) Control Name: Brief description of the requirement Framework(s): Which frameworks this control applies to Status: Current implementation state Owner: Assigned team member Last Updated: Recent activity timestamp

Use filters to focus on specific controls:

By Status:

By Framework:

By Owner:

By Risk Level:

By Category:

The search bar allows quick lookup by control ID, name, or keywords.

Click any control to open its detail page, which includes multiple tabs:

Displays core control information:

Shows all items connected to this control:

Policies: Documented procedures addressing this control.

Documents: Supporting documentation and evidence

Tests: Automated and manual tests verifying the control

Risk Scenarios: Associated organizational risks

This tab reveals the complete picture of how the control is implemented and verified.

Centralized location for all evidence supporting this control:

Evidence accumulates over time, creating a comprehensive audit trail.

Chronological history of control-related activities:

This audit trail demonstrates ongoing attention to the control.

Every control should have a designated owner responsible for:

To assign an owner:

The owner receives a notification, and the control appears in their assigned tasks.

Assign multiple controls to the same owner efficiently:

This is useful for assigning control categories to functional owners (e.g., all access controls to IT, all HR controls to People Ops).

When you activate multiple frameworks, DSALTA intelligently maps overlapping controls. Understanding this mapping is crucial for efficiency.

On any control detail page, the Mapped Frameworks section shows all frameworks satisfied by implementing this control.

Example: An encryption control might map to:

DSALTA maps controls based on:

When you complete one control, all mapped frameworks show progress.

Reduced Duplication: Implement once, satisfy multiple frameworks

Efficient Evidence Collection: One evidence set serves multiple requirements Streamlined Testing: One test verifies multiple framework controls

Faster Certification: Less total work to achieve multiple certifications

Not all controls are equally urgent. Prioritize based on:

Start with Critical and High-risk controls:

These form your security foundation and are heavily scrutinized during audits.

Focus on controls mapped to multiple frameworks—these give maximum return on effort.

Address "Needs Attention" controls immediately:

Implement foundational controls before dependent ones:

Beyond standard framework controls, you can add organization-specific controls:

Custom controls help you manage security requirements not explicitly covered by standard frameworks, such as customer-specific contractual obligations.

DSALTA automatically updates control status based on:

Status Change Logic:

Add context to controls through comments:

Comments appear in the control's Activity tab and help teammates understand control status without direct communication.

When a control shows "Needs Attention":

DSALTA tracks time-to-remediation, helping you demonstrate responsive security practices.

Generate control reports for:

Export options: