Drata

Training videos (login required) and step-by-step guides for all Drata features 

Understand the Drata Platform

Access our available training videos about SafeBase and Drata

Training Videos

Explore Third-Party Risk Management and adding current vendors to Drata in this training video.

Training Video: Vendor Management Overview (New Experience)

Configure settings that shape vendor types, vendor risk levels, vendor inherent-risk classification.

Training Video: Optimizing TPRM Through Vendor Settings (New Experience)

Learn how to review and customize AI-driven vendor assessment criteria.

Training Videos: Review and Custom Vendor Criteria (New Experience)

Learn how to add prospective vendors to Drata, as well as existing vendors through connections, CSV, API, or manual entry.

Training Videos: Add Prospective and Existing Vendors to Drata (New Experience)

Learn how to leverage the TPRM agent to collect documentation, assess vendors, and finalize review decisions.

Training Video: Conducting an End-to-End Vendor Review with the Drata TPRM Agent (New Experience)

Training videos for Drata's TPRM features

Third-Party Risk Management (TPRM) Training Videos

Learn Drata’s core compliance workflows and audit readiness basics in this platform overview training video.

Drata Platform Overview Training Video (New Experience)

Learn how connections power automation and continuous compliance in Drata.

Drata Connections Training Video (New Experience)

Explore how to build, publish, and manage policies in Drata, including setting up approval workflows.

Policy Management in Drata Training Video (New Experience)

Learn how to navigate the Personnel page, manage personnel compliance, and create personnel exclusions.

Managing Personnel Compliance in Drata Training Video (New Experience)

Learn how frameworks, requirements, and controls work together in Drata.

Frameworks in Drata: Understanding Requirements and Control Readiness Training Video (New Experience)

Learn how to manage, monitor, and remediate controls in Drata.

Drata Controls (DCFs) Training Video (New Experience)

Learn how to navigate Drata's Monitoring page to help you understand tests and test results.

Understanding Monitoring in Drata Training Video (New Experience)

Understand how to navigate the evidence page and manage evidence in Drata to maintain continuous compliance.

Managing Evidence in Drata Training Video (New Experience)

Learn how to visualize risk data in this comprehensive training video.

Risk Insights Training Video (New Experience)

Master risk management in Drata with our three-part training video series.

Risk Management Training Videos (New Experience)

Learn how to create an audit in Drata, invite your auditor, and manage requests, evidence, and communication throughout the audit process.

Creating and Navigating an Audit in Drata Training Video

Connect Okta with Drata to sync users, enable SSO, monitor.

Integrating an Okta Tenant with Drata Training Video

Training Videos (New Experience)

Learn how to customize Trust Center branding, legal links, email settings, and custom URLs.

SafeBase Trust Center Branding and URL Setup Training Video

Learn how to access and configure SafeBase integrations, API keys, partners, SSO, and SCIM settings.

SafeBase Integrations Training Video

Learn how to upload, configure, manage, and replace documents.

SafeBase Trust Library Documents Training Video

Learn how to manage, review, and govern reusable questions and answers in SafeBase’s Trust Library Knowledge Base.

SafeBase Trust Library Knowledge Base Management Training Video

Learn how to configure Trust Center access settings to control content visibility for public, approved, and permission-based users.

SafeBase Trust Center Access Levels Training Video

Learn how to configure Clickwrap, DocuSign, Ironclad, default NDA settings, and NDA bypass options.

SafeBase Trust Center NDA Set up Training Video

SafeBase Trust Center video collection provides quick interactive guides to help you build, manage, and optimize your security portal.

Training Videos (SafeBase) 

This training videos walks you through Drata’s Connections feature, showing how integrating your systems powers automation and continuous compliance.

Drata Connections

Explore Drata’s Personnel feature in this training video series to streamline personnel compliance and employee onboarding.

Drata Personnel Overview

Watch videos on how to build, publish, and manage policies in Drata’s Policy Center, including setting up approval workflows.

Drata Policy Center

Drata Controls

This 3-part tutorial series will help you get started with Drata's Risk Assessment module.

Drata Risk Assessment

In this article, we explain the concepts to consider and demonstrate how to connect your Google Workspace IdP to Drata

Connect your Google Workspace IdP to Drata

In this article, you'll get an overview of the Drata platform and its key features.

Introduction to the Drata Platform

This short video describes the benefits of Drata Automation vs Manual GRC strategies

GRC Before and After Automation

This video describes the considerations for performing a GRC Gap Analysis

GRC Gap Analysis

This video will walk you through an overview of Drata's Monitoring page and help you understand tests and test results.

Monitoring Video Tutorial

The Evidence Library is your centralized repository for managing manual and automated test evidence, ensuring your controls stay audit-ready.

Evidence Library Video Tutorial

This training video series provides an overview of Drata’s Custom Workflows feature and how to configure workflows with with webhooks, trigger tasks, or Slack notifications when various events occur in…

Custom Workflows Training Video

Custom connections and test video overview

Training Videos (Classic Drata Experience)

Get started with Drata by following the Quick Start guide.

Quick Start Guide

Learn which fields and documents complete the Provide Basic Info task.

Complete the Provide Basic Info task in Quick Start

Complete essential setup tasks, understand task requirements, and resolve common issues.

Quick Start

Get an overview of the Drata Dashboard, including compliance readiness, alerts, test trends, tasks, and key risk indicators.

Dashboard overview

Dashboard

AI-Assisted Custom Control Mapping to GRC Objects

The Recommendations feature uses AI to analyze custom controls and suggest relevant Drata mappings. Learn more here!

Recommendation

Connections in Drata integrate your identity, HRIS, infrastructure, and development tools to automate evidence collection and continuously support compliance.

Understanding Connections in Drata

In this article, you learn how to integrate multiple identity and HRIS connections in Drata.

Integrate Multiple Identity and HRIS Connections

This article explains how Drata connects to HRIS systems, what employee data is accessed, how that data is stored and used, and what options are available if no HRIS integration…

How Drata Uses HRIS Data

Connect multiple MDM providers to Drata to monitor devices across systems with automatic syncing and clear data priority rules.

Multiple MDM Support (New Experience)

Partner Connections: Expanding Compliance with External Tools

In this article, you learn how to manage connected infrastructure accounts.

Manage connected infrastructure accounts

Learn how Drata displays and evaluates version control access, including write access, merge permissions, and MFA status

Manage connected version control

Learn how to map accounts to personnel in Drata, handle service and system accounts and mark accounts out of scope.

Map accounts to personnel in Drata (New Experience)

Learn how to manually resync identity and account data in Drata to immediately reflect access and personnel changes.

Ad-hoc identity and account resync

Learn how to connect HRIS providers to Drata and the available HRIS providers.

Connect your HRIS to Drata

Use your personal GitHub account, but add your work email and set proper notification routing

GitHub Access: Should I use my personal account or a new company account?

GitHub Rulesets

GitLab MFA options for GitLab.com and Self-managed

GitLab MFA configurations

Allowlist IP Addresses for WAF Configurations

Connections

Custom Device Connections

Part 1: Custom Connections and Tests

Part 2: Automate Evidence Submission

Part 3: Create, Run, and Map a Custom Test

Custom Connections and Tests

Mark Controls In or Out of Scope

Manage Scope and Exclusions in Drata

Restore Drata's default mappings between controls and framework requirements or monitoring tests.

Apply Default Mappings for Controls

Create, Edit, and Manage Controls

Map evidence and policies to controls (New Experience)

Assess and Manage Individual Controls

Learn how to set up, manage, and delete required approvals for controls, and understand how approval stages affect control readiness.

Manage Required Approval and Control Readiness

Set up and manage notifications to keep control owners and approvers informed about required approvals and control changes.

Manage Notifications for Required Approvals and Control Updates

Import Controls in Bulk (New Experience)

Restore a DCF control to Drata's latest published template when the language in your workspace has diverged.

Revert a Control to Drata's Latest DCF Template

Export Control-to-Requirement Mappings

Summary of Controls and Tests Updated from January 2024 Through October 2025

Controls and Tests Updated Between January 2024 and October 2025

Add internal notes, tickets, and tasks to controls to provide context for your team.

Annotate a Control

Learn more about the newest changes for our monitoring tests and controls.

Early Access for Monitoring and Controls

Controls

Drata's DCF: A proprietary, framework-agnostic control catalog to centralize and accelerate your compliance efforts.

Introduction to the Drata Control Framework (DCF)

Explain what the Drata Control Framework is, how it relates to requirements, and why multiple controls may map to a single requirement.

The Drata Control Framework & Requirement Relationship

DCF Library Updates on 1/18/2024

Understand the Difference: Terms of Service (DCF-63) vs. Master Service Agreements (DCF-66)

The Drata Control Framework

Learn how to use Monitoring in Drata to review test results and maintain continuous audit readiness.

Monitoring Overview

Understanding Test Provisioning and the Test Library (New Experience)

Test Library (New experience)

Learn how to filter, search, and narrow tests in Drata’s Monitoring page to quickly find results, review findings, and resolve compliance gaps.

Filter and search tests in Monitoring (New Experience)

Learn how to use the test details page in Drata Monitoring to investigate test results, remediate issues, manage exclusions, and understand how tests impact control readiness and compliance.

View and Manage Test Details (New Experience)

Manage individual and bulk test actions in Drata's Monitoring page, and understand test details including findings, exclusions, history, and controls.

Manage Tests in Monitoring Page

Enable and use AI-generated summaries to quickly understand why custom tests failed, and export findings to CSV for analysis or auditor sharing.

Enable AI Summaries for Tests

Add tests from the Test Library to a workspace (New Experience)

Manually map or unmap tests to controls to ensure monitoring results accurately reflect how your controls are implemented.

Map Tests to Controls

Download Audit Evidence for a Custom Test (New Experience)

Disable a test when it does not apply to your environment or when the control is monitored outside of Drata.

Disable a Test

Exclude specific items from a compliance test when they do not apply to your organization, and re-include them when needed.

Exclude Findings from Tests

When should you use each option within Drata?

Exclusions vs. Disabling a Test (Concept Guide)

Exclusions in Drata let you exclude specific resources or test findings from compliance monitoring to reduce noise, manage audit scope, and focus on relevant evidence.

Excluding Infrastructure resources

Implementing exclusion labels for specific resources

Exclusion labels within GCP

Implementing exclusion tags for specific resources

Exclusion tags within AWS

Exclusion tags within Azure

Understand why Drata Azure tests fail and how to add the required Microsoft Graph API and Azure RBAC permissions to restore monitoring.

Identify and Add Missing Azure Permissions for Drata

Identify and Add Missing AWS Permissions for Drata

Identify and Add Missing GCP Permissions for Drata

Resolve SSL/TLS Compliance Testing Issues in Drata

Dratabot

Tests automatically run every evening (PST) in Drata, but you're also able to manually trigger them anytime

Manually Running a Control Test

Fix Now and Test Now Button Visibility in Drata Explained

Conditions That Affect 'Fix Now' and 'Test Now' Button Visibility

Monitoring

AWS Resource Permissions

The Resource Guide provides detailed information about available attributes and the structure of your data when you are creating custom test

Resource Guide for custom tests

Learn the most common use cases for creating custom tests

Common use cases for custom test

Create custom tests in Drata to monitor controls that are not covered by Drata's out-of-the-box tests, using your own logic and integrations.

Create and Publish Custom Tests

Update the logic of a published custom test by creating and editing a draft version, then publishing when ready.

Collections