This guide helps you configure and manage policies in Drata for control mapping, test readiness, approval, and submission. It includes steps for publishing policies, linking them to controls, editing locked policies, and ensuring you have the proper role permissions to take action.
Prerequisites
Before configuring or submitting a policy:
You must have access to the Policy Center page.
You must be the Policy Owner or work with the current owner.
The policy must be in Draft or New status to allow editing.
Only published policies are evaluated in control tests.
Resolve the Message: "Your Acceptable Use Policy is either not in Drata or is past the renewal date"
If this message appears in a test or control:
Open your Acceptable Use Policy in the Policy Center page.
Confirm the policy has a valid renewal date.
Select Publish to activate the current version.
Re-run the test to update the status.
This message appears when a policy has not been published or has an outdated renewal date.
Resolve the Message: Policy is marked as 'Not Ready' after test passes
If the policy test passes but the policy status remains Not Ready:
Open the policy.
Scroll to the Linked Controls section.
Confirm that the policy is assigned to the appropriate control.
If not, assign it using the control assignment menu.
Policies must be linked to at least one control to be considered ready.
Edit a Policy in 'Needs Approval' Status
Policies in Needs Approval are locked for editing. To make changes:
Open the policy.
Select Cancel Approval in the top-right corner.
The policy will return to Draft status.
Make your edits and re-submit the policy for approval.
Submit a Policy After Updating the Renewal Date
Publish a Policy for Test Recognition
If you're unable to submit a policy after editing:
Confirm that you are the Policy Owner.
If you are not the owner, contact the listed owner for submission.
If needed, an admin can reassign ownership to you so you can proceed.
Only the Policy Owner or an admin can submit a policy for approval.