---
schema_version: "1"
id: 0fa0f1a0d140a55345aa0017bb09f2ff39ce23982ebb6517a6d2f523dbcb89f1
title: Work with Controls for IT Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_work_with_controls.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_work_with_controls.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5ff7557f02b91411a68debfad60dc422f4413571cd04821c592dc6dcca8130cf
description: Author compliance controls, build validation procedures, and run compliance tests by using Process Compliance Navigator. IT Compliance shares the Controls Management capability with Process Compliance Navigator, so your compliance team uses the same authoring experience to define controls that enforce ISO 27001 and other compliance frameworks across your IT processes.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Work with Controls for IT Compliance

Author compliance controls, build validation procedures, and run compliance tests by using Process Compliance Navigator. IT Compliance shares the Controls Management capability with Process Compliance Navigator, so your compliance team uses the same authoring experience to define controls that enforce ISO 27001 and other compliance frameworks across your IT processes.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d118374e74">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d118374e74 ">To author compliance controls and validation procedures:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d118374e74 ">Compliance Admin permission set</td>

          </tr>
        </tbody>
      </table>

The Controls Management features that IT Compliance uses live in the Process Compliance Navigator app. From there, compliance officers create and version compliance controls, group controls into validation procedures, configure context definitions and expression sets, test control operating effectiveness, and map controls to the business operations processes and assets they cover. IT Compliance teams use these same features to govern IT Service records such as incidents, change requests, and service requests.

Use the topics in the Process Compliance Navigator help to complete each task.

1. Create and version compliance controls to enforce your regulatory and policy requirements.
    
    See [Compliance Control](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_validation_control.htm&type=5&language=en_US) and [Validation Compliance Controls](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_validation_control_overview.htm&type=5&language=en_US) in the Process Compliance Navigator help.
2. Group compliance controls into a validation procedure so that the procedure runs every time a business process invokes it. Use validation procedures to enforce compliance checks on IT Service records, such as making sure that an incident's root cause analysis meets compliance requirements before closure.
    
    See [Validation Procedure](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_validation_procedure_overview.htm&type=5&language=en_US) in the Process Compliance Navigator help.
3. Evaluate the operating effectiveness of your compliance controls and capture verifiable evidence during the execution of a test. Use compliance test executions to give regulators and auditors confidence that your controls work as intended.
    
    See [Compliance Testing](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_compliance_test_overview.htm&type=5&language=en_US) in the Process Compliance Navigator help.
4. For controls that don't run automated validations, such as manual reviews or external processes, log compliance evidence through the Compliance Logging API.
    
    See [Non-Validation Compliance Controls](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_nonvalidation_controls_overview.htm&type=5&language=en_US) in the Process Compliance Navigator help.
5. Link a compliance control version to the business operations processes it protects so that process owners can see which safeguards apply to their workflows.
    
    See [Map a Compliance Control to a Business Operations Process](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_controls_business_operations_process.htm&type=5&language=en_US) in the Process Compliance Navigator help.
6. Link a compliance control version to the assets it protects so that asset owners can see which controls cover their systems.
    
    See [Map a Compliance Control Version to an Asset](https://help.salesforce.com/s/articleView?id=ind.business_compliance_suite_asset_controls.htm&type=5&language=en_US) in the Process Compliance Navigator help.