💡 Still using the classic Drata experience? Refer to Internal Security for the original UI.
Configure how Drata collects evidence for employee security requirements, including workstation compliance, security awareness training, and physical access records.
The Internal Security settings define how employee-related security evidence is sourced and tracked across your organization. These settings directly support multiple compliance controls and affect onboarding, recurring tasks, and audit evidence.
Prerequisites
Required Drata roles: Administrators
Find Internal Security settings
Go to Settings. Under Organization, select Personnel compliance, then select Internal Security.
The Internal Security page is divided into the following sections:
Workstation configuration monitoring
Office visitor logs
Each section determines how evidence is collected, not whether the requirement exists.
Workstation configuration monitoring
Define how Drata collects evidence for employee workstation security controls. You can choose one or more of the following methods:
Drata Agent: Automatically collects workstation configuration evidence from employee devices.
MDM integration: Uses a supported mobile device management (MDM) provider to collect device compliance data.
Manual uploads (My Drata): Allows employees to upload evidence manually through their My Drata tasks.
Important behavior notes:
Using automated methods does not prevent manual uploads.
The manual option only affects the employee My Drata experience.
Administrators can always upload evidence directly to personnel records if needed.
Office visitor logs
If your organization has a physical office, upload visitor sign-in records to support physical access controls.
Accepted formats include:
Exported visitor logs
Images or scans of physical sign-in books
If your organization does not maintain a physical office, this section may be left blank.
Common misconfigurations to avoid
Enabling manual-only workstation evidence without clear employee guidance
Assuming MDM or agent connections retroactively populate past evidence