⚠️ Select your experience
The steps depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
Overview
Drata's GRC team creates and maintains all controls in the Drata Control Framework (DCF). These controls are designed to help you manage compliance across multiple frameworks using consistent, up-to-date language.
Over time, the language in a DCF control in your workspace may differ from Drata's latest published template for one of two reasons:
Your team manually edited the control to better fit your organization's needs
Drata's GRC team updated the control to reflect changes in compliance standards or improve accuracy
This feature allows you to compare your control against Drata's latest template and selectively revert language, ensuring you always have access to the most current DCF guidance—without losing intentional customization.
Prerequisites
The following roles can revert a control to Drata's latest template:
Administrator
Workspace Manager
Information Security Lead
Service Group User
Guest Administrator
Change to the latest DCF control template
On the Controls page, select any DCF control.
In the Overview tab, within the Info section, select the Edit icon.
Scroll down to the bottom of the section and select View latest template.
After selecting View latest template, one of the following occurs:
If your control already matches Drata's latest template, you'll see a message indicating that no differences were detected.
If differences exist, Drata shows a side-by-side comparison:
Left: Your current control language
Right: Drata's latest published template
When differences are detected, you can choose how to apply updates:
Apply changes per field: Accept or reject updates for individual fields
Apply all: Revert all fields to Drata's latest template at once
This comparison shows exactly what would change if you applied the template.
Audit visibility
When you apply Drata's template language, an audit event is automatically created:
Event name: Drata's templated control language applied
This provides transparency and an audit trail showing when standard control language was applied.
When should you use this?
Revert to Drata's latest template when:
You want to align controls with updated compliance standards
You want to undo manual edits and return to baseline language
You're preparing for an audit and want standardized wording
You want to compare your custom language against Drata's recommendations
Instructions for the Classic Experience ⬇️
Drata's GRC team creates and manages all controls in the DCF library. These controls help manage your team's compliance to multiple frameworks at once. However, there are two ways that the language on your DCF controls could differ from what Drata's GRC team has published:
Your team has decided that more specific language is needed in order to adequately manage your company's compliance program, so someone has made a manual edit to the control.
Drata's GRC team has published an update to the DCF control to make it more accurate and align it with updated compliance standards.
With this feature, you will always have access to the most current DCF control language as published by Drata's GRC team.
BEFORE DIVING IN
This feature can be accessed by users with the following roles:
Admin
Workspace Managers
Infosec Leads
Service Group Users
Guest Admins
HERE'S HOW
Go to any DCF control, and click on the "edit" icon. Once you're in the "edit" experience, you'll see the option to "View latest template".
If your company's version of the control matches Drata's current published template, you'll receive a message that Drata has not detected any changes.
If Drata detects that language in your control differs from the language that our GRC team has published, we will show you how your control would change if you accepted the changes to align with Drata's template.
You can choose to apply Drata's template to your controls either on a per field basis, or you can apply them all at once.
On the left side, you'll see the language that your control currently uses. On the right, you'll see the language that Drata's GRC team has published for this control's template.
In the example shown above, you'll see that the current control for this company has language in the "Control Activity" field (on the left), however the current DCF control language published by Drata's GRC team does not contain an activity (on the right). If you chose to apply the changes to this field, the result would be that DCF-11 would have the language in the "Control Activity" field removed.
Also in the example above, you'll see that the current control for this company has different language in the Control Name field (on the left), from the current DCF template published by Drata's GRC team (on the right). If you chose to apply the changes to this field, the result would be that DCF-11 would change from "Annual Access Control Review" to "Periodic Access Control Review."
It should also be noted that you can apply or reject each field independently, OR apply all changes. Simply select whether you'd like to apply or reject each field, and hit "Save choices."
After you have saved your choices, they will be applied to your control, but you will still be in the "edit" experience. Verify your verbiage, and then click "save" on the control to solidify your changes.
We've added a new audit event for you to keep track of when you've applied these changes. The event is "Drata's templated control language applied." This is what the event looks like once it's produced:
For more information about how Drata creates and maintains the DCF control library, check out this help article.