Can a Control Objective and Control associated with a policy be revised? If so, can you please help me with the procedure?

[ASWIN KUMAR SUR]

Can a Control Objective and Control associated with a policy be revised? If so, can you please help me with the procedure?

I can understand that a policy can be revised if it is in 'Published' state. But what if a control objective/control needs a revision?

[Community Alums]

Yes that's the Revision of your Control Objective!!

And as i mentioned in my previous answer, once a active Control objective is updated with another attestation then it will make all the controls to draft state and also create some other controls too.

Mark my answer correct & Helpful, if Applicable.

Thanks,
Sandeep

[Srinivasulu Lag · Accepted solution]

Hi @ASWIN KUMAR SURESH ,

Deactivating control objective means, control objective is no longer relevant to their citation or parent control objective.

And you are true that, when we activate a control objective with some modifications then all the instances(means controls) created from control objective will be move back to Draft state by associating latest changes from control objective.

So as you mentioned, it will enables us to have workflow back for revision of controls.

Please Mark ✅ Correct/helpful, if applicable.

Thanks,

Srinivasulu Laggala

[ASWIN KUMAR SUR]

Thank you for the clarifications, @Sandeep Dutta  @Srinivasulu Laggala !!! Very much appreciated.

[Community Alums]

Hi @ASWIN KUMAR SUR ,

Now, you can mark multiple answers as correct which helped you.