Author compliance controls, build validation procedures, and run compliance tests by using Process Compliance Navigator. IT Compliance shares the Controls Management capability with Process Compliance Navigator, so your compliance team uses the same authoring experience to define controls that enforce ISO 27001 and other compliance frameworks across your IT processes.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service. |
| User Permissions Needed | |
|---|---|
| To author compliance controls and validation procedures: | Compliance Admin permission set |
The Controls Management features that IT Compliance uses live in the Process Compliance Navigator app. From there, compliance officers create and version compliance controls, group controls into validation procedures, configure context definitions and expression sets, test control operating effectiveness, and map controls to the business operations processes and assets they cover. IT Compliance teams use these same features to govern IT Service records such as incidents, change requests, and service requests.
Use the topics in the Process Compliance Navigator help to complete each task.
-
Create and version compliance controls to enforce your regulatory and policy
requirements.
See Compliance Control and Validation Compliance Controls in the Process Compliance Navigator help.
-
Group compliance controls into a validation procedure so that the procedure runs every
time a business process invokes it. Use validation procedures to enforce compliance checks
on IT Service records, such as making sure that an incident's root cause analysis meets
compliance requirements before closure.
See Validation Procedure in the Process Compliance Navigator help.
-
Evaluate the operating effectiveness of your compliance controls and capture verifiable
evidence during the execution of a test. Use compliance test executions to give regulators
and auditors confidence that your controls work as intended.
See Compliance Testing in the Process Compliance Navigator help.
-
For controls that don't run automated validations, such as manual reviews or external
processes, log compliance evidence through the Compliance Logging API.
See Non-Validation Compliance Controls in the Process Compliance Navigator help.
-
Link a compliance control version to the business operations processes it protects so
that process owners can see which safeguards apply to their workflows.
See Map a Compliance Control to a Business Operations Process in the Process Compliance Navigator help.
-
Link a compliance control version to the assets it protects so that asset owners can see
which controls cover their systems.
See Map a Compliance Control Version to an Asset in the Process Compliance Navigator help.