Link an Evidence to a Risk Sub-Control
Introduction
A User can attach an Evidence to a Risk Sub-Control to use in the Implementation Rating. The Implementation Rating is affected automatically based on the Evidence’s status. Each attached Evidence is weighted evenly along with linked Vendor Controls.
e.g. Two in place Evidences, one in place and audited Vendor Control, and one Expired Evidence will result in a 75% Implementation Rating
Step-by-Step Guide
Navigate to the Controls menu under Risk
Open a Control Category and choose a Sub-Control
Find the Evidence data grid and click the “Link” button
Either create a new Evidence or select an existing Evidence
Click the select button of an Evidence from the modal that appears