Define the safeguards that enforce your compliance policies and satisfy external
regulations. Compliance controls are the practical, testable checks that turn policy intent into
measurable protection, mitigate registered risks, and produce the evidence external auditors
rely on.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited
Editions with Agentforce IT Service. |
- Controls Management Workflow for IT Compliance
Follow how a compliance team creates, tests, and maintains compliance controls that enforce policies, satisfy regulations, and mitigate risks. See how controls are mapped to risks, business operations processes, and assets, and how control testing feeds into evidence collection and remediation workflows.
- Set Up Controls Management for IT Compliance
Bring Controls Management online for your org. Turn on the feature in Salesforce Go, enable the control implementation methods that match how your compliance team works, and assign permission sets so your admins can start authoring controls, building validation procedures, and running compliance tests.
- Work with Controls for IT Compliance
Author compliance controls, build validation procedures, and run compliance tests by using Process Compliance Navigator. IT Compliance shares the Controls Management capability with Process Compliance Navigator, so your compliance team uses the same authoring experience to define controls that enforce ISO 27001 and other compliance frameworks across your IT processes.
- Types of Controls in IT Compliance
IT Compliance supports multiple control types depending on how they operate and how they're validated.
- How Control Effectiveness Drives Risk Scoring
See how control effectiveness ratings drive residual risk calculations, how control failures automatically increase risk scores, and how risk owners monitor which controls protect their risks.
