Controls - Managing a Control

Selecting any Control on the table will open a Sidebar window on the right-side of the page. This Sidebar view provides areas for an Organization to adjust the fields identified below, as well as some additional links and functionality. 

The Control Code and Description will be displayed at the top of the Sidebar. The 3-Dots button will also provide options to jump directly to the Guidance area (View Guidance), Create a Task (Custom Task Creation), and View History (Review historical changes to the Control). A “Banner” will also display the “Freshness” of the Control (This Control is on track and review scheduled on <Date>). The following sections are displayed in the Sidebar:

• Category - Administrative, Technical, Physical

• Group - Default Groups assigned to “group” together similar Controls

• Associated Standards - Associated Standard Codes related to the Control (HIPAA, SOC2, etc) - For example, 45 CFR 164.310(d)(2)(i) and CC 6.5.1

• Tags - An Organization may create different Tags

• Assignee - The “Owner” of the Program, by-default. From here, the Assignee may be changed via the dropdown - Only those who have been added as Contributors can be selected from the dropdown.

• Guidance

  • The Guidance section will list Details instructing the Organization what needs to be completed to meet the Control’s requirements

  • Selecting the View button will shift the sidebar window and display the Full Details for Guidance, as well as a section below for Recommended Tasks

  • Recommended Tasks

    • This section offers the same functionality as the Tasks section, which lives below the Guidance area

    • Selecting Add Task will open the Task Creation Window and autofill some of the details. a Control Owner/Contributor may adjust the Details of the Task before Saving. Once Saved, the Task will be displayed in the Tasks area

• Control Response

  • Status can be set: Met, Partially Met, Not Met, N/A - just like it can be on the main table

  • Last Updated - Displays the last update made and who made the update

  • Risk Rating can be set/adjusted, just like it can be on the main table

  • Control Review Schedule - Allows a Control Owner/Contributor to identify the Review Schedule for this Control. 

    • Review Schedule - Never, Monthly, Quarterly, Twice a Year, Annually, Every 2 Years, and Every 3 Years

    • Start Date - Custom

    • By setting the Control Review Schedule, the Organization can affect the Freshness Score overall

• Tasks

  • Select View Board to jump into the Tasks Module kanban board

  • Select Add to open a Task Creation Window and fill in the necessary details to create a Task

  • Select View X Recommended Tasks (X will change depending on the number of tasks available)

    • Recommended Tasks are tasks that a Control Owner/Contributor may create in order to address requirements to meet a Control. The Guard will recommend Tasks based on the Guidance provided. Only a Control Owner/Contributor can create these Tasks

    • An Organization is able to decide which tasks and when the Organization wishes to complete them

• Evidence

  • Allows Team Members to upload Evidence for a particular Control and attach it directly to the Control

  • Selecting View Board will shift the page to the Programs > Evidence area

• Policies & Documents

  • Displays the Activated Policies & Documents that have been added to the Control

  • Selecting Add will open a window that displays all of the Policies & Documents the Organization has Activated in the Policy Module.

    • Selecting the checkbox individually or selecting multiple will allow a Control Owner/Contributor to link the selected Policies & Documents to the Control, after selecting Save

    • Clicking on a Policy File Name will display the policy in a small overlay window

      • Changes or Activation of Policies & Documents must be done in the Policies MODULE

  • Policies may be Unlinked, if necessary, once they have been added

• Notes

  • Notes are for any additional details the Organization needs/wants to document. Notes can be added simply by typing in the details, then selecting the submission arrow. Notes will be displayed below the Notes field and identify the Date and Poster.