Mapping Internal Controls to Policies for Compliance and Gap Analysis

Mapping Internal Control (Company Controls)

Internal Controls that have a connected or ‘mapped’ control library will automatically be populated when the control requirement is mapped to the policy record. Internal Controls may also be mapped independently to the policy record. NOTE: your policy must be in draft (open), or revision status.

1. In the Policy Record, go to the Internal Controls Tab

 2. In the Internal Controls Tab, use the Ellipses drop-down menu and select Look Up to access your existing Internal Controls or Add New to add a new Internal Control. New Internal Controls will automatically be added to your Policy and the Internal Controls Library in your Compliance module.

3. Your Internal Control Library will appear. Use the filters and keyword search to select the requirement(s) (obligation) and internal controls you wish to map.

4. Select the controls using the checkbox (Use SHIFT + right click to select multiple controls).

5. Click ‘Apply”

1. Now your internal controls are mapped, and any connected internal controls will also be mapped to your policy.
2. This can be viewed in the policy record and/or in the control library list view and in the specific control.
3. Note in the policy record, filters are available to search for specific regulations and controls. 

Policy record/Internal Control Tab

Internal Control List View