Drata allows your company the flexibility to customize the framework and determine which controls are appropriate for your audit. You can mark controls as 'In Scope' or 'Out of Scope' directly in the Drata platform.
BEFORE DIVING IN
Only Administrators and Information Security Leads have access to this section within Drata.
Mark controls out of scope
Use the tick box next to a control or group of controls (you can select multiple or all on the page), then click the file box icon on the far right of the screen to mark the controls 'Out of Scope'.
Mark controls in scope
To mark controls 'In Scope', follow the same process. Select the controls using the tick box or utilize the 'Select All' box to select all out of scope controls on that page and use the file box icon on the far right to mark the selected controls 'In Scope'.