Policy Mapping: Mapping Internal Controls and Frameworks for Compliance

Policies can be mapped to your Internal Controls, regulatory control frameworks or standards for compliance. Mapping controls enables you to conduct a gap analysis on your policies to ensure you meet compliance requirements, as well as to ensure your policies are being implemented through control validation.

The 1Risk Platform maps frameworks via Internal Controls, based on the principle that mapping a framework to a policy requires an Internal Control to validate implementation.

Internal Controls are mapped to the policy. This automatically triggers mapping of frameworks that have been mapped to the Internal Control. For more on creating Internal Controls,  Compliance workflows and Governance integration with Compliance see our Compliance Training.

1. Open the Policy Record and go to the Internal Controls Section

2. Click Add New to create an Internal Control or Look Up to map one or more of your existing Internal Controls

3. Note: Once the Internal Control is mapped, the Control Libraries section auto-populates with the related framework controls.