Add a regulatory authority, the regulations it issues, and the clauses within each regulation to capture external requirements as structured records you can map to internal policies and controls.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service. |
| User Permissions Needed | |
|---|---|
| To create and manage regulatory records: | Compliance Admin permission set |
IT Compliance uses a versioned record system to keep an audit trail of regulatory content. When you create a regulation or a regulation clause, a version record is automatically created in Draft status. Always create a new version when a regulatory authority publishes a meaningful update, so you retain the history of what was in effect at any point in time.
- From the App Launcher, find and select IT Compliance.
-
To capture the body that issues regulations, such as a government agency or industry
standards organization, open Regulatory Authorities from the navigation
menu, click New, and enter the authority details.
For more details about creating a regulatory authority, see Create a Regulatory Authority Record.
-
To capture a specific regulation issued by an authority, such as SOC 2 or NIST CSF, open
Regulations from the navigation menu, click New,
and enter the regulation details.
For more details about creating a regulation and a regulation version, see Create a Regulation and a Regulation Version.
- To define a specific provision within a regulation, click Related on the regulation record.
-
Click New on Regulation Clauses and enter the clause details.
For more details about creating a regulation clause and a regulation clause version, see Create a Regulation Clause and a Regulation Clause Version.
- Save your changes.
Map each regulation clause version to the internal policy clauses and compliance controls that enforce it. See Manage Regulation Clauses and Regulation Clause Versions for IT Compliance.