Skip to main content

Map control information and evidence across Workspaces

Learn how to map control info, policies, and evidence across Workspaces and manage shared controls efficiently.

⚠️ Select your experience

The steps to map control information and evidence across Workspaces depend on your interface version. Select a link to skip to the instructions for your version.

Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.

Instructions for the New Experience ⬇️

What mapping controls across Workspaces does

Mapping controls across Workspaces lets you share control information, policies, and evidence for the same control across multiple Workspaces.

This is useful when:

  • You manage multiple products or business units

  • The same control applies across Workspaces

  • You want to avoid duplicating evidence and policies

When controls are mapped, updates made in one place apply everywhere that control is mapped.


What can be mapped

Only the following control sections can be mapped across Workspaces:

  • Control info

  • Policies

  • Evidences

Important: Miscellaneous Evidence cannot be mapped across Workspaces.


Prerequisites

  • Workspaces must be enabled.

  • You must have one of the following roles:

    • Admin

    • Workspace Manager

    • Control Manager

    • Information Security Lead


Workspace Manager limitations

Workspace Managers have additional restrictions:

  • Workspace Managers assigned to only one Workspace cannot map controls across Workspaces.

  • Workspace Managers can map or unmap only the Workspaces they’re assigned to.


How control mapping works

Controls can be mapped only if the same control code exists in multiple Workspaces.

Mapping creates a control group. Within that group, you can:

  • Share control info

  • Map policies

  • Map evidence

  • Unmap a Workspace later to make the control independent again


Map controls across Workspaces

  1. Go to the Controls page.

  2. Select a control that exists in multiple Workspaces.

  3. Add or remove Workspaces in the Mapped Workspaces section.

Result: The control info is now mapped across the selected Workspaces.

Policies can only be mapped across Workspaces after the control itself has been mapped (grouped).


Map evidence across multiple workspaces

Use this workflow to ensure a single piece of evidence satisfies controls in multiple workspaces simultaneously.

  1. Go to the Evidence page in Workspace 1 and upload your artifact.

  2. Navigate to the Controls page and select the specific control in Workspace 1.

  3. Verify that the control is associated with multiple workspaces in the Linked Workspaces section.

  4. Select the Evidence tab and click Map Evidence.

  5. Choose the Evidence Library (recommended) option.

  6. Select the desired evidence in the modal, click Next, and select the additional workspaces to link.

Result: The evidence is shared and reusable across all mapped Workspaces.


How shared evidence behaves

When evidence is mapped across Workspaces:

  • It can be reused indefinitely in those Workspaces

  • Updates apply to all mapped controls

  • It behaves similarly to shared policies

Important: Updates to shared evidence may impact the readiness of all controls mapped to it.


Update evidence mapped across Workspaces

You can update mapped evidence either:

  • From a control, or

  • Directly from the Evidence Library


Update from a control

  1. Go to the Controls page.

  2. Select a control that exists in multiple Workspaces.

  3. Expand Evidence Library under Control evidence.

  4. Select the Update icon.

  5. Save your changes.


New Monitoring & Controls experience (Early Access)

If you’re using the new Monitoring & Controls experience:

  • The Update icon isn’t available on the Control page.

To update evidence manually:

  1. Open the Control page.

  2. Select the Evidence tab.

  3. Select the evidence.

  4. Choose Update dates.

  5. Update the Creation or Renewal date.


Unmap a Workspace from a control

At any time, you can remove a Workspace from a control group.

When you unmap a Workspace:

  • The control becomes its own independent instance

  • Previously shared updates no longer apply


Summary

Mapping controls across Workspaces helps you:

  • Reduce duplication

  • Maintain consistency

  • Update evidence and policies once instead of multiple times

This feature is designed for teams managing shared compliance requirements across multiple Workspaces.


Instructions for the Classic Experience ⬇️

The ability to link controls information and evidence across Workspaces is integral for those managing compliance across Workspaces. This feature allows for applicable users to link control content (such as info), evidence, and policies across workspaces for the same control, which saves copious amounts of time when managing and maintaining controls for multiple business units, product lines, and the like.

There are a few limitations:

  • Workspace Managers that have only 1 assigned Workspace cannot link a control to another Workspace

  • Workspace Managers cannot link or unlink Workspaces that they are not assigned to.

  • Miscellaneous Evidence is not included in workflow.

Prerequisites

  • Workspaces must be enabled.

  • You must have an Admin, Workspace Manager, Control Manager, or Information security lead role.

    • Workspace Managers have some restrictions in certain use cases.

Link control info and evidences across workspaces

As long as a control code exists in multiple workspaces, the control’s info section can be linked across workspaces, creating a linked group. Based on this linked group a user can also link policies and evidence from the Evidence Library across Workspaces with just a few clicks.

Additionally, the user can unlink a Workspace from the grouped controls, making the control its own instance once again.

  • Controls that have the same control code can be linked across workspaces.

    • For example, Drata Control DCF-1 in multiple workspaces.

    • For example, Custom Control ABC-10 in multiple workspaces.

  • Only the following sections of a control can be linked across Workspaces:

    • Control Info

    • Policies

    • Evidence from Evidence Library

  • When Evidence is shared across workspaces, that evidence can then be used indefinitely within those shared workspaces and acts very similar to Drata policies. This means that updates applied to a shared piece of evidence will apply to any linked control across the platform.

Link controls

Note: When linking evidence to a control, you can only link existing evidence already within Drata. You cannot add or create a new evidence during the linking process. Ensure the evidence you need has been added beforehand.

  1. Go to the Controls page and select a control that exists in multiple workspaces.

  2. A control drawer is displayed. Within the CONTROL INFO section, there is a field for Linked workspaces. Select Manage button.

  3. Enter or remove workspaces and save.

Link a policy

Once you’ve created a control group within control info, you can link a policy to the control within those workspaces as well.

  1. Go to the Controls page and select a control that exists in multiple workspaces.

  2. A control drawer is displayed. Within the CONTROL EVIDENCE section, select Add for Link policies within Drata.

  3. Select a policy and continue.

  4. Select the desired workspaces and save. You can also remove or add workspaces here.

Link evidence from Evidence Library

Once you’ve created a control group within Control info, you can link a piece of evidence from the Evidence Library to the control within those workspaces as well. This workflow is similar to linking a policy.

  1. Go to the Controls page and select a control that exists in multiple workspaces.

  2. A control drawer is displayed. Within the CONTROL EVIDENCE section, select Add for Evidence Library.

  3. Select the evidences and continue.

  4. Select the desired workspaces and save. You can also remove or add workspaces here.

Update evidence that is linked across workspaces

Once you've linked evidence to a control across workspaces, you can update it either within the control or directly from the Evidence Library page. Any updates will automatically apply to all controls linked to that evidence.

  1. Go to the Controls page and select a control that exists in multiple workspaces.

  2. A control drawer is displayed. Within the CONTROL EVIDENCE section, expand Evidence Library.

  3. Select the update icon () to update the evidence.

Once evidence is linked to a control in any workspace, it can be mapped to any control within that workspace. Any updates to this evidence may impact the readiness of all mapped controls across the platform.

If you’re using the new Monitoring & Controls experience (Early Access):

The Update icon is not available directly from the Control page.

To manually update evidence:

  1. Open the Control page and select a control.

  2. Select the Evidence Tab and then the desired evidence.,

  3. Select Update dates from the Evidence Details page.

  4. Update the Creation or Renewal date.

Did this answer your question?