⚠️ Select your experience
The steps depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
When a policy is mapped to a control, Drata can:
Track which policies support each control requirement
Include policies in control readiness evaluations
Run policy-related compliance tests where applicable
Prerequisites
For accounts without workspaces, the following roles can map policies to controls: Admin, Information Security Lead, Policy Manager, Control Manager (Controls page only).
For workspace-enabled accounts: Admin, Information Security Lead, Workspace Manager.
Map from the Policies page
Open the Policies page.
Select a policy.
Open the Controls tab.
Select Map Controls.
Select the controls you want to associate.
Map from the Controls page
Open the Controls page.
Select the control you want to update.
Go to the Policies tab.
Select Add.
Choose one or more policies to map. To create a new policy during this step, select Create a new policy.
Select Save.
Instructions for the Classic Experience ⬇️
Drata allows you to link your policies to specific controls across supported frameworks. This ensures that your documentation aligns with compliance requirements and allows Drata's automated tests to verify that the appropriate policies are in place.
Who Can Link Policies?
You can link policies to controls if you have one of the following roles in Drata: Admin, Information Security Lead, Policy Manager.
Important Notes About Workspace Behavior
If your account uses workspaces, you cannot link policies to controls from the Policy Center. You must link them from the Controls page, where workspace context is available.
View Linked Controls
Go to the Policy Center.
Select a policy.
Open the Overview tab.
Under the Details section, view the Linked Controls and Frameworks section.
Link a Policy to Controls (Controls Page)
If you link a policy to a control that is already in Approved status and requires approvals, the control's review status will automatically revert to Prepare for Approvers.
Go to the Controls page.
Select a control to open the drawer on the right.
Scroll to the Policies section.
Click Add.
In the modal, select one or more policies you'd like to link.
Click Save.
Auto-Mapped Policies
Drata's templated policies have been automatically mapped to the applicable controls. You can unlink a pre-mapped (or any) policy at any time.