You can no longer modify the included and excluded personnel list in the test drawer for all monitored tests that correspond to a personnel compliance check. To modify this, please go to the personnel page and view the exclusions tab. Below is a list of personnel compliance checks with their corresponding tests

Personnel exclusions will only apply to your primary workspace in Drata

When creating an exclusion, you can select multiple applicable personnel. However, when saved, Drata will track the exclusion for each applicable personnel separately. The exclusions can be viewed from the personnel details or in the exclusions tab in the personnel page. This way you are able to create exclusions in bulk and modify them on a per-personnel basis.

You can create as many exclusions as you’d like for any personnel

If there are multiple active exclusions for a personnel with the same compliance check(s), Drata will only apply the most recently created active exclusion. Once that one has been archived or is inactive, Drata will apply the subsequent exclusion.

If an exclusion has a custom duration, it will only be applied for that specified time frame.

Devices cannot be individually excluded in Drata. The device compliance checks across all devices for that personnel can be excluded.

On the personnel list page, select the personnel you want to exclude. Click on Actions and click on Create Exclusion

Confirm the applicable personnel for the exclusion. You can search through your personnel list and add any others you’d like to exclude

Fill out the exclusion settings

Select the compliance checks the exclusion should contain. The selected checks will appear below the selector and can be edited.

Set the duration of this exclusion. By default, the duration will be indefinite. You can select Custom instead and select a range of dates. You cannot apply an exclusion to the past.

Enter a reason you are creating the exclusion. This reason will appear in the audit download if the personnel is sampled.

Once you check the box to confirm the details, you can click Save. On the next Autopilot sync, the applicable personnel’s compliance, test data, and control data will be updated with the exclusion.

Click on the Exclusions tab in the personnel page and click on Actions and then Create exclusion

Follow the steps above to fill out the exclusion details

When you are creating an exclusion, select Status or group for the personnel grouping in Applicable personnel. You can then type and/or multi select an IdP group and/or employment status for the exclusion.

Once you save the exclusion, a separate exclusion with the same settings will be created for each group or status selected. These can be modified at any time as well.

On a daily basis, Drata will enforce the exclusion based on who is part of that group or status. For example, if someone is added or removed from that group or status, the exclusion will behave accordingly automatically.

When you are creating an exclusion, select All personnel – all time for the personnel grouping in Applicable personnel.

Once this exclusion is saved, Drata will apply this exclusion to all personnel all time in your account for the specified settings. This exclusion can be modified at any time as well. EX: if your company does not require a password manager, you can create an exclusion for all personnel all time for the “Password Manager” check for an indefinite period of time. This will ensure any new personnel that join the company will also get the exclusion automatically.

An exclusion icon on the personnel table will be shown for the compliance checks that the personnel has been excluded from.

You can also view the exclusion in the personnel details.

If you click on the exclusion, the details for the applied exclusion will be shown. You can edit the exclusion settings for an active exclusion (compliance checks, duration, and reason) at any time by clicking on Edit. Changes will be synced next time Autopilot runs.

You can view all exclusions in the Exclusions tab in the personnel page. You can click on an exclusion to view the details and edit the settings at any time. Changes will be synced next time Autopilot runs.

You can also filter exclusions in the exclusions table by compliance check by clicking on the “All compliance checks” dropdown. This will show exclusions that contain the selected compliance check.

You can also search exclusions by the applicable personnel in the Search bar

Personnel exclusions will be applied to the tests that correspond to the excluded compliance checks. When viewing a test, you cannot modify the included or excluded list. To modify this list, please visit the exclusions table to modify or create an exclusion.

When viewing the Excluded list, you can see how long that person has been excluded for.

Go to the Exclusions tab in the personnel page and click on the archive icon at the right of the exclusion. Archiving an exclusion cannot be undone. Once archived, the personnel’s compliance checks, associated tests, and control data will be updated next time Autopilot runs.

To view archived exclusions, change the filter to Archived

If you set a custom duration for an exclusion, Drata will auto-archive the exclusion once that duration has completed.

To archive exclusions in bulk, select the exclusions you want to archive, and then click the Actions button and then select Archive Exclusion. Note: this cannot be undone.