Controls

This part allows you to define, modify and plan new controls.

List of controls

The list of controls allows you to display the list of controls, to filter them by domain or to search for a control based on part of its name. The "Column visibility", "Copy" and "Export" buttons let you choose the displayed columns, copy the list or export it to Excel.

Clicking on :

• the domain, you arrive at the chosen domain definition

• the clause, you arrive on the description of the control

• the number of measurements, you arrive to the list of measurements of this control

• the "plan" button takes you to the control planning

The "New" button lets you create a new control.

Show control

This screen displays a control.

A control consists of:

• a domain;

• a clause ;

• a name;

• a security objective;

• attributes;

• the measurement data;

• the verification model;

• an indicator (green, orange, red); and

• an action plan to be applied if control of this control fails.

The screen also lists the measurements of this control (scope, planning date, completion date and score), and the correspondences of this control with the controls of other frameworks.

When you click:

• “Plan”: you arrive at the control planning screen.

• "Edit": you arrive at the control edit screen

• "Copy": you arrive at the control creation screen, pre-filled with the data of this control

• “Delete”: allows you to delete the control and return to the list of controls

• "Cancel": returns you to the list of controls

When the AI agent is enabled, the robot "AI analysis" icon, at the top right of the screen below the help button, opens a panel with an AI analysis of the control. See Use the analysis.

Create a control

This screen is used to add a control to a framework. It is opened by the "New" button of the list of controls or by the "Copy" button of the control display screen.

The screen contains the same fields as the control display: domain, clause, name, security objective, attributes, measurement data, verification model, indicator and action plan.

When you click:

• "Save", the control is created and you return to the list of controls.

• "Cancel", you return to the list of controls.

Controls can also be imported from a spreadsheet or from a framework of the repository through the import screen.

Edit a control

This screen allows you to modify a control.

When you click:

• "Save", the changes are saved and you return to the control display screen.

• "Cancel", you return to the control display screen.

Schedule a control

This screen is used to plan a control based on a control.

The screen contains:

• One or more clauses;

• The name of the control;

• The security objective;

• The planning date;

• The scope;

• The frequency of checks; and

• Those responsible for carrying out the controls.

When you click:

• "Plan", a new measurement is created for the given scope by copying all the control data, and is scheduled for the specified date. You then return to the list of controls.

• "Cancel", you return to the list of controls.