We have a client scenario that the policies are created by a 'Governance unit' and then the control objectives of the policies are converted to controls for compliance checking by 'Compliance unit'. As these two activities are handled by two different teams at client place.
As per OOB configuration, the control objective will be active during the life cycle of policies and expected to map to respective entity types during the policy cycle (before publishing the policy). Once a policy is published, the control objectives will set to inactive. When a control objective is inactive, you cannot map to entity types or create controls.
In our client scenario, Governance Unit is not aware of mapping the entity types for control objective as they will ensure the statement are created only. The compliance unit is the one who are going to create controls from these control objectives.
What is the best way to re-activate the control objectives of the policy so that the compliance team can proceed in creating controls for it?
