Findings can now be linked to the controls in Frameworks and Controls. When an audit or inspection turns something up, you record which controls it affects, and everyone can see which controls have open findings against them.
Choose the frameworks for a board
In a findings board's Settings, under Controls, pick the frameworks the board works with, such as SOC 2 or ISO 27001. Its findings can then be linked to the controls those frameworks cover.
Link requirement by requirement
On a finding, Link controls opens the framework's requirements, each with the controls mapped to it. Tick a requirement to link all of its controls, or pick them one by one. A control that covers several requirements, or several frameworks, is linked once and shows as linked everywhere. Search by requirement, control code or name, or show only what is linked.
See it in the table
Add the Controls column to any findings view. It shows the control codes, with every code and name on hover, and you can filter by control and save the filter in a view. Exports include the codes.
Nothing changes silently
Every link and unlink shows in the finding's history. If a board stops offering a framework, its findings keep only the controls the board's remaining frameworks offer. Deleting a control or a framework works the same way, and each finding's history keeps the old links.