Control metadata
At the top of the drawer, you will see:| Field | Description |
|---|---|
| Control ID | Unique identifier (e.g., HRS-1, GOV-2) |
| Source | Where the control originates (e.g., DSALTA) |
| Owner | The team member responsible — click to assign or change |
| Frequency | How often this control should be reviewed (e.g., Annual) |
| Results | Current status — Completed, Needs Attention, or No Evidence |
Three tabs
Evidence & Monitoring
All policies, documents, and tests mapped to this control. A green checkmark indicates completion. You can add or remove evidence items directly from this tab.
Risk Scenarios
Pre-evaluated risk scenarios that this control mitigates. Each scenario includes severity and a description.
Mapped Frameworks
Every compliance framework this control applies to, enabling cross-framework efficiency.
Evidence completion logic
A control is marked Completed when all evidence items (policies, documents, and tests) show a green checkmark. If any item is incomplete, the control shows Needs Attention. If no evidence exists at all, it shows No Evidence.A single control can map to multiple frameworks. Completing evidence for one framework automatically satisfies the same control in other frameworks where it is mapped.
.png?fit=max&auto=format&n=tsMQJyneJ1xquFUo&q=85&s=4d401cc03b547d99b6f75a6bd170c334)