HERE'S WHY

With Policy Center, you are able to link policies to controls.

BEFORE DIVING IN

Admins, information security leads, and policy managers have access to manage and act on their policies.
Workspace managers and any accounts with workspaces enabled do not have access to this feature.

HERE'S HOW

Note: If you map to an approved control that have required approvals, the control owners are notified, and the control’s review status reverts to prepare for approvers.

To see which active frameworks and controls are mapped to your policy, in Policy Center, select the desired policy. Under the Policy details, view the information under Linked controls and Frameworks.

To map a policy to a control:

Select the edit icon next to Policy details.
Scroll down to Linked controls and select the Link control button.
Choose the controls you’d like to link then select the Link button.

You have successfully mapped your policy to controls. You can also verify in the policy details for the mapped controls.

Link Policy to Controls

Note: Workspaces does not support linking policies to controls.

On the Controls page, select a control to access the control drawer. In the control drawer, scroll down to the POLICIES section.

To link a policy, select Add. A modal will open including all of the policies you currently have in Drata. Check the policies you would like to link and select Save.

If you want to create a new policy, select Create a New Policy in the upper right corner of the modal.

Note: Drata's templated policies have been automatically mapped to the applicable controls. You can unlink a pre-mapped (or any) policy at any time.

Note for linking control info and policy across workspaces: Once you’ve created a control group within control info, you can link a policy to the control within those workspaces as well.