---
schema_version: "1"
id: a4a47bd7a2ae28142983f3419f8ee0810675d2046940983f81f56a3d8c72b522
title: Controls Management for IT Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_controls_mgmt.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_controls_mgmt.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 7a62ce542eca6aa948232d152bbb94f407404bacc6272f61a0ae15c93118f653
description: Define the safeguards that enforce your compliance policies and satisfy external regulations. Compliance controls are the practical, testable checks that turn policy intent into measurable protection, mitigate registered risks, and produce the evidence external auditors rely on.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Controls Management for IT Compliance

Define the safeguards that enforce your compliance policies and satisfy external regulations. Compliance controls are the practical, testable checks that turn policy intent into measurable protection, mitigate registered risks, and produce the evidence external auditors rely on.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

- **[Controls Management Workflow for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_controls_mgmt_workflow.htm&release=264.0.0&type=5)**  
    Follow how a compliance team creates, tests, and maintains compliance controls that enforce policies, satisfy regulations, and mitigate risks. See how controls are mapped to risks, business operations processes, and assets, and how control testing feeds into evidence collection and remediation workflows.
- **[Set Up Controls Management for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_setup_controls_mgmt.htm&release=264.0.0&type=5)**  
    Bring Controls Management online for your org. Turn on the feature in Salesforce Go, enable the control implementation methods that match how your compliance team works, and assign permission sets so your admins can start authoring controls, building validation procedures, and running compliance tests.
- **[Work with Controls for IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_work_with_controls.htm&release=264.0.0&type=5)**  
    Author compliance controls, build validation procedures, and run compliance tests by using Process Compliance Navigator. IT Compliance shares the Controls Management capability with Process Compliance Navigator, so your compliance team uses the same authoring experience to define controls that enforce ISO 27001 and other compliance frameworks across your IT processes.
- **[Types of Controls in IT Compliance](https://help.salesforce.com/s/articleView?id=service.it_srvcs_controls_types.htm&release=264.0.0&type=5)**  
    IT Compliance supports multiple control types depending on how they operate and how they're validated.
- **[How Control Effectiveness Drives Risk Scoring](https://help.salesforce.com/s/articleView?id=service.it_srvcs_controls_effective_risks.htm&release=264.0.0&type=5)**  
    See how control effectiveness ratings drive residual risk calculations, how control failures automatically increase risk scores, and how risk owners monitor which controls protect their risks.