Customization is crucial for any successful security and compliance program, and having the flexibility to add and remove controls allows you to tailor these policies to fit your needs.
Policy templates in Vanta already have the appropriate controls mapped to the policy, but additional controls can be added or removed as needed.
Custom Policies will require you to manually add appropriate controls.
Adding Controls to Policies
To add controls to any policy, select the policy from the policy page
Select the controls tab
Select Add control
Search for the control you want added to the policy, and select Add.
Removing Controls
To remove a control from a policy, select the policy from the policy page
Select the controls tab
Select Add control
Find the control you would like to remove and select Remove
AI Suggested Control Mapping
AI-suggested control mapping is available on a part of Vanta's Growth or higher pricing.
If you are using Vanta's default template stack or bringing in your custom policies, you can use Vanta AI to help you map security controls back to the policy.
Click on the policy you would like to edit.
The controls listed here are the default controls mapped to the policy; they can be removed by clicking the X.
If you would like to add additional controls, select the Map control
Choose from any of the controls within your Vanta instance, or add in controls suggested by AI.
Vanta AI will generate control suggestions that can be added to the policy.
Please note this may take a few moments
Based on suggestions, you can map these controls to the policy.
Select the check mark to map the control to your policy, or the X to reject the suggestion.