Skip to main content

Linking and unlinking controls for a policy

Roles and permissions

The following roles can link controls to a policy:

  • Anyone with manager or contributor permissions for a policy

A policy is a set of rules and regulations that govern how you intend to manage your business. Controls indicate how the policy is implemented and tested, and what proof is required to show the policy is being followed. You may need many controls to fully implement a policy since a single control typically covers only one section of a policy.

Linking a policy to controls allows you to easily find the controls that implement the policy. From a control, you can find the policy it implements.

Controls are linked directly to a policy, not to any of its contents, such as a policy version, document, or section.

Policy documents created or edited in the policy editor or those in DOCX format are automatically converted to PDF and added as proof to linked controls when the associated policy version becomes effective. Any proof linked to the effective version of the policy is also added as proof to the linked controls. When an effective version is retired, the PDF files and associated proof files are removed from the linked controls, and the new effective policy files are added.

Policy documents and proof files automatically linked to a control can't be unlinked manually. To unlink them, you have the following options:

  • Make a new version of the policy effective. This removes the prior policy document and any associated proof for the effective version from the linked controls and replaces them with the new policy document and proof files for the new effective version.

  • Retire the effective version of the policy. This removes the policy document and any associated proof from the linked controls.

  • Unlink the policy from the control. This removes links for the policy document and proof associated with the effective version from the control.

  • Remove proof files from the effective policy version. This removes the same proof files from any linked controls. The policy document remains linked.

  • Archive the policy. This removes the policy document and proof associated with the effective version from the control.

    Note

    If you unarchive the policy, the policy document and proof are re-linked to the control.

To link controls to a policy:

  1. From the left menu, select Policies.

  2. Select the policy where you want to link controls.

    The Overview tab displays.

  3. Select the Controls tab.

    The list of linked controls displays.

  4. Click the Link button.

    The Link objects window displays with a list of controls.

    Note

    Only controls, where you have manager or contributor permissions, are listed.

    • Use the Search field to narrow the list of controls.

    • Check Expand scopes to display control scopes.

  5. Choose the controls to link by selecting one or more checkboxes.

  6. Click Link.

    The list of linked controls display in the list.

To unlink controls from a policy:

  1. From the left menu, select Policies.

  2. Select the policy where you want to unlink Controls.

    The Overview tab displays.

  3. Select the Controls tab.

    The list of linked controls displays.

  4. Hover over the control you want to unlink and click the unlink icon on the far right.

To view linked Policies from a control:

  1. From the left menu, select Controls.

  2. Select a control.

    The Details tab displays.

  3. In the Links section, select Policies.

    A list of Policies linked to this control displays.

To link Policies to a control:

  1. From the left menu, select Controls.

  2. Select a control.

    The Overview tab displays.

  3. In the Links section, select Policies.

    A list of Policies linked to this control displays.

  4. Click +Add.

    The Link objects window displays a list of available Policies.

  5. Select one or more Policies and click Link.

    The list of linked Policies displays.