Is there a way where you can have your control objective and your control different? We want to use the control objective and create our own controls, but it seems when you tie in the control objective it automatically populates it for you and there is no way to change it. Is there a way to do this?
Typically when you create a control framework, you identify a risk, The control objective is what you are trying to achieve, and the control is how you actually achieve it.
This should be supported without configuration by making use of the 'Inherit from Control Objective' check box on the control form, which should be there if you're using Policy and Compliance on San Diego. Please let me know if it helps for what you're trying to do here.
