Link Evidence and Controls

Introduction

Controls and Evidence are associated in a Many-to-Many connection.

For example:

Control: “An information security program is in place”

Evidence 1: “Information security program policy”

Evidence 2: “Meeting minutes for information security meetings”

Evidence: “Information security program policy”

Control 1: “An information security program is in place”

Control 2: “Policies are kept up to date regarding information security”

Control Statuses are automatically updated based on associated Evidence status. If a single associated Evidence is ‘expired', then a Control is ‘Not in Place’. Likewise, if all associated Evidence is ‘In Place’, then a Control is ‘In Place’ as well.

From a Control:

Step-by-Step Guide

1. Navigate to the “Controls” menu

2. Select a Control Framework

3. Select a Control to link with Evidence

4. Click the “Link/Unlink Evidence” button

5. Select an Evidence

6. Click the “Link Selected Evidence” button

7. Click the “Submit” button

Video Tutorial

From a Piece of Evidence

Step-by-Step Guide

1. Navigate to the Evidence menu

2. Select an Evidence to link to a Control

3. Scroll down and click the “Link/Unlink” button

4. Choose the Control Framework to find the Control to link to

5. Check each Control to link

6. Click the “Link Selected Evidence” button

7. Click the “Submit” button

Video Tutorial

Related Articles