Control Workspace
How control records, policy requirements, and statuses work.
Control record anatomy
- Control ID and domain metadata (for example: A1.2, Availability)
- Owner assignment for accountability
- Policy rule defining required evidence count and accepted evidence kinds
- Current readiness status driven by attached evidence quality and freshness
Status behavior
Controls move between states such as ready, missing evidence, and expired evidence based on policy requirements and evidence validity windows. Updating policy requirements immediately affects readiness calculations.
Policy tuning
Edit policy requirements when audit expectations change. Keep accepted evidence kinds and minimum evidence counts explicit so your team has clear collection targets.
