⚠️ Select your experience
The steps depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
Overview
Drata provides default mappings between:
Controls and framework requirements, and
Controls and monitoring tests
You can customize these mappings at any time by linking, unlinking, or replacing requirements or tests. If you want to return to Drata's recommended configuration, you can revert to the default mappings at any time. This allows you to:
Safely experiment with custom mappings
Restore Drata's baseline guidance
Align controls with updated or improved default mappings
💡 Important:
Custom controls, custom requirements, and custom tests are not affected. These mappings always remain under your control.
Prerequisites
The following roles can apply default mappings:
Administrator
Guest Administrator
Workspace Manager
Information Security Lead
Service Group User
Apply default mappings for an individual control
You can compare and restore default mappings for a single Drata Control Framework (DCF) control.
Open any DCF control.
Select the desired tab
Monitoring: Comparison to default mapped tests
Frameworks: Comparison to default mapped requirements
Select Compare to defaults.
Review the differences between your current mappings and Drata's default mappings.
In the comparison modal, choose one of the following:
Keep current configuration to retain your custom mappings
Apply defaults to restore Drata's default mappings
If your current mappings already match Drata's defaults, a notification appears indicating that no changes are required.
When should you use default mappings?
Apply default mappings when:
You want to undo extensive customization
Drata has updated mappings for improved accuracy
You're troubleshooting unexpected control coverage
You want to return to a known baseline before an audit
Key takeaways
You can customize mappings freely and safely
Default mappings can be restored at any time
Custom controls, requirements, and tests are never changed
Default mappings can be applied at the control level
Framework-level resets apply only to control-to-requirement mappings
Instructions for the Classic Experience ⬇️
Apply default mapping between controls and requirements
Drata has a default mapping between controls and framework requirements. However, you have full control over these mappings. You can link or unlink controls and requirements. After customizing these mappings or relationships, if you would like to go back to the default mappings, you can revert to the default mappings at any time.
Custom controls and framework requirements are not affected. These mappings will remain under your complete control.
BEFORE DIVING IN
This feature can be accessed and used by the following roles:
Admin
Guest admins
Workspace managers
Information security leads
Service group users
Apply default mappings from the control or requirement
Go to any DCF control or any requirement from a standard Drata framework, and select the Compare to Defaults link to view any differences between the current mapping and Drata's default mapping. This is to display what would happen if you were to apply Drata's default mapping.
The changes are displayed in the modal. You could keep your current configuration (Keep current tests) or apply the default changes (Apply defaults).
If your mapped tests are the same as Drata's default mapping, when you select Compare to defaults, this notification modal will be displayed.
Reset the control mapping for an entire framework
If ever you want to reset the relationship between a Drata standard framework and the DCF control library, you can do a bulk reset from each framework.
💡 Only Admins, Guest Admins, and Service Group Users can take this action.
To reset a Drata standard framework, go to the framework and click on the gear icon in the upper right of the requirement list.
When you click "Reset control mapping" you'll see the following pop-up:
Apply default mapping between controls and monitoring tests
Drata has a default mapping between controls and monitoring tests. However, you have full control over these mappings. You can link or unlink controls and tests. If you have customized (added, deleted, or replaced) tests to your controls, or if Drata has updated these mappings for better and more appropriate alignment between controls and tests, you can always revert to the most current default mappings at any time.
Custom controls and tests are not affected. These mappings will remain under your complete control.
BEFORE DIVING IN
This feature can be accessed and used by the following roles:
Admin
Guest admins
Workspace managers
Information security leads
Service group users
Apply default mappings from the control
Go to any DCF control and select the Compare to defaults to view any differences between the current mapping and Drata's default mapping.
If there are changes, you'll see which tests will be added or removed from your control. You could keep your current configuration (Keep current tests) or apply the default changes (Apply defaults).
If your mapped tests are the same as Drata's default mapping, when you select Compare to default, this notification modal will be displayed.
