The Controls Page within Vanta shows all of your account's controls. You can then filter, edit, and assign them.
Getting started
Accessing the Controls page
From the left-hand navigation panel, select Controls
This will take you to your company's custom controls page, which lists all of the customer controls created within your account
Searching and filtering controls
To search for a specific control, use the search bar at the top left-hand corner of the page. The results will appear in the list below.
Understanding control status
Control status provides a high-level view of whether a control’s requirements are currently being met based on its mapped tests and documents. It reflects the current state of those tests and documents—it does not represent an auditor’s assessment of the control.
Control status | Description |
Ok | All automated tests and mapped documents for the control are passing. |
Needs evidence | One or more automated tests or mapped documents for the control are not passing. |
⚠️ Note: Control status is not visible to auditors. If you’re using a Trust Center, control status is shared and may affect which controls are shown and how they appear there.
Editing controls
Click on the Control you would like to edit
Edit the summary and description to your needs, and select Save Changes.
You can also map tests, documents, frameworks, and risk scenarios related to the control from here.
Modifying your controls may affect your audit. Please inform your auditor and Success Manager of any changes.
Custom fields
You can add additional fields to your controls from the Compliance Settings page.
In your account header, click the Settings icon
In the Settings page menu, scroll to the Features section and select Compliance
Go to the Custom fields for controls section. Common examples of a custom field include:
Revision number
Date last updated
Applicability
Process/Procedure
Frequency
Various Statuses
From here, select + Add in the top right-hand corner
Add a label and description, and choose the field type. Once the data type is selected, it can not be changed
Selecting the Share with auditor option will dictate whether auditors with access to a control can see this field.
Select Add
New fields will automatically be added as a column on the Controls page
Clicking on a control will allow you to edit the information in all available fields
From the import controls page, you can choose to add new controls or update existing ones. Both import options allow users to populate their new custom fields.
Removing controls
On the right-hand side of the control, click the three dots
Click Remove
A pop-up modal about the control and its mapped frameworks will appear.
Update the Effective date for when control deprecation went into effect
Click the Delete button
This will remove the control from the control page. Please note that Removing a Custom-Created control will permanently delete it.
Bulk deactivating controls
If you would like to deactivate multiple controls at once, select the checkbox next to the controls you would like to deactivate
Select Deactivate
Confirm that you would like to complete this action, by selecting Deactivate
Adding removed controls
Click on the More button on the top right corner of the Controls page
Select View deactivated controls
This will bring you to your deactivated controls
Find the control in the list
Click Add Control
A dialogue box will pop up
Update the Effective Date when the control went into effect
Click the Add button