--- sourceDocument: Brazil Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/governance-risk-compliance Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Manage control indicators using the Compliance Workspace # Manage control indicators using the Compliance Workspace {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Manage control indicators using the Compliance Workspace Continuous monitoring within the ServiceNow Compliance Workspace enables compliance administrators and managers to track key risk and control indicators effectively. The Compliance Overview provides an executive dashboard to assess compliance requirements, overall compliance status, and detailed compliance breakdowns. Data supporting indicators can be gathered automatically or through manual tasks, which then inform control issues, risk score updates, and audit or control testing activities. Show full answer Show less ## Indicators and Indicator Templates Indicators serve to monitor individual controls or risks by collecting relevant data and audit evidence. Indicator templates facilitate the creation of multiple indicators for similar controls or risks, streamlining management for consistent monitoring. ## Entity Based Access Entity Based Access offers granular data access control, allowing administrators to assign access to entity-related records by adding users or user groups or configuring entity user fields. Qualified users with the required roles gain access to key tables such as Indicator, Indicator Task, Indicator Result, and Compliance Overview, ensuring secure and appropriate access to compliance data. ## Compliance Overview and Reports The Compliance Overview includes several interactive reports that help analyze compliance status: * **Compliance Requirements:** Donut chart to focus on specific compliance areas. * **Overall Compliance:** Donut chart showing overall compliance across all control requirements. * **Entity Filter:** Drop-down to select and compare compliance across entities. * **Control State:** Checklist to filter reports by control states. * **Compliance by Authority Document:** Bar chart comparing compliance levels by entity or authority document. * **Compliance Breakdown:** Multi-level pivot showing compliance details by authority documents and policies. * **Non-Compliant Entities:** Column chart counting non-compliant control requirements grouped by entity. ## Authority Documents and Citations Authority documents define policies, risks, controls, audits, and related compliance processes. Each document record includes related lists detailing individual conditions and is integrated within the GRC Workbench for Policy and Compliance Management. Content reference tags can be applied to authority documents and their citations to enable filtering and easier identification of related content packs, integrations, and use case accelerators. Citations break down authority documents into manageable provisions and themes, which can be created manually or imported from UCF authority documents. Relationships between citations can be established to support detailed compliance management. Continuous monitoring involves activities related to identifying and creating key risk and controls indicators. The Compliance Overview is available to compliance administrators and compliance managers, providing an executive view into compliance requirements, overall compliance, and compliance breakdowns. Supporting information can be collected for indicators through automatic data collection or manual tasks. Indicator results are then used to create issues for controls, update risk scores, and provide supporting information for audit activities and control testing. Indicators : Indicators collect data to monitor controls and risks, and collect audit evidence. Indicators monitor a single control or risk. Indicator templates : Indicator templates allow the creation of multiple indicators for similar controls or risks. Note: The Entity Based Access provides a framework for more granular approach to management of data access to objects associated with an entity. Administrators can grant access to an entity's related records by adding users or user groups, or by using entity user fields for entity-based access configuration. For more information, see [Entity Based Access](https://www.servicenow.com/docs/_2_Q_WCBambur_vCKzMleA "The Entity Based Access (EBA) application enables you to segregate data on the records that are based on entities. Entity-based access administrators can use this tool to set up secure, controlled access to various objects."). When a user is qualified based on these configurations and has the minimum required roles, they will have access to the following tables: * Indicator * Indicator task * Indicator result {#manage-control-indicators-ws__ul_pxz_gh2_cfc} ## Compliance Overview {#manage-control-indicators-ws__section_wbq_5bk_tbb} {#manage-control-indicators-ws__table_pr2_yzb_y5__entry__3} | Name | Visual | Description | |-|-|-| | Compliance Requirements | Donut chart | Select a wedge to focus on a specific compliance area. | | Overall Compliance | Donut chart | Displays the overall compliance of all the control requirements in the system. Selecting a specific wedge in the previous widget brings that area into focus. | | Entity | Drop down list | Select one or more entities to view and compare their compliance across multiple items. | | Control State | Check list | Select or clear check boxes to view filter reports by control state. | | Compliance by Authority Document | Bar Chart | Compare level of compliance depending on the selected entity and/or authority document. | | Compliance breakdown | Multi-level Pivot | View a breakdown of control compliance by related authority documents and policies. | | Non Compliant Entities | Column Chart | Count of non-compliant control requirements grouped by entity. | [Table 1. Compliance Overview reports in the base system] {#manage-control-indicators-ws__table_pr2_yzb_y5} ## Authority Documents {#manage-control-indicators-ws__section_ff2_wbk_tbb} Authority documents define policies, risks, controls, audits, and other processes to ensure adherence to the authoritative content. Each authority document is defined in a record and the related lists on that record contain the individual conditions of the authority document. The relationships of these authority document related list items are visible in the GRC Workbench in the Policy and Compliance Management application. Note: You can [add content reference tags to authority documents](https://www.servicenow.com/docs/D0LYIaNE77znOS19EsjFUg#add-content-ref-tags-to-records "As you're analyzing any of the many types of records available in GRC applications, it is easy to add a content reference tag so the record can be included when you perform searches for records associated with a given integration, content pack, use case accelerator, and so forth."). Content reference tags allow you to filter records in order to more easily identify the content packs, integrations, and use case accelerators associated with the authority documents. ## Citations {#manage-control-indicators-ws__section_gf2_wbk_tbb} Citations contain the provisions of the authority document, which can be interrelated. Citations break down an authority document into manageable themes. You can create citations or import them from UCF authority documents and then create any necessary relationships between the citations. Note: You can [add content reference tags to citations](https://www.servicenow.com/docs/D0LYIaNE77znOS19EsjFUg#add-content-ref-tags-to-records "As you're analyzing any of the many types of records available in GRC applications, it is easy to add a content reference tag so the record can be included when you perform searches for records associated with a given integration, content pack, use case accelerator, and so forth."). Content reference tags allow you to filter records in order to more easily identify the content packs, integrations, and use case accelerators associated with the citations.