My team is new to the GRC module. We have created an issue that is very specific to a one control, which we applied. What is the benefit of attaching an authority document? Our authority document is a compliance framework that we need to ensure compliance to, but if the issue is specific to control A and the compliance framework has controls A-Z listed in the authority document, by attaching the authority document would we just be saying the issue is related to the compliance framework regardless if it is only for control A vs all A-Z controls in the compliance framework?
