Control status not applicable

[rajeeshraj]

How can a control be marked as 'Not applicable'? The status field is read-only, and I was wondering who and how we mark a control as Not applicable.

Thanks

[SanjivMeher · Accepted solution]

I think this is done as part of attestation. When a compliance manager send an attestation to the control owner to attest, they have a question, if this control implemented, where there are option to make if this control is applicable to measure compliance.

[rajeeshraj]

Thanks

Multiple attestations can be sent out for the same control. Even if one attestation is marked as Not applicable, the Control moves to Review state with Status as Not Applicable