Control vs. Control objective
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-19-2022 11:19 AM
Is there a way where you can have your control objective and your control different? We want to use the control objective and create our own controls, but it seems when you tie in the control objective it automatically populates it for you and there is no way to change it. Is there a way to do this?
Thanks
C
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎05-20-2022 08:05 AM
So we are using for compliance purposes, where we have the regulatory citations that are mapped to controls objectives which are later attested to by various org. users. We used a tool last year, but found that although helpful, some were not granular enough to meet user needs, as it often left the end user confused and questioning what exactly they were trying to attest to. This year we wanted to make them specific to our organization and wanted to utilize the control objectives but then have controls that were organizationally specific. It seems within the control objective there is a check box that says "create controls automatically" which I have deselected. Maybe I need to create all the objectives, create all the controls and then somehow tie all of them together? It just seems odd that Control Objective and "controls" are utilized in the same fashion and these could be individual but I just cant seem to figure out how to do it.
TIA,
CK