Drata allows flexibility for your company to make the framework your own, and determine which controls are appropriate for your audit. The functionality to mark controls 'In Scope' and 'Out of Scope" will help you to do the same directly in the Drata platform.

Only account administrators or information security leads have access to this section within Drata.

By using the tick box next to a control or a group of controls (select multiple or all on the page), you can select the control(s) and select the file box icon on the far right of the screen to mark the controls 'Out of Scope'.

To mark a control(s) 'In Scope' you will follow the same process. Select the control(s) using the tick box or utilize the 'Select All' box to select all out of scope controls on that page and use the file box icon on the far right to mark the selected controls 'In Scope'.