Skip to main content

Creating Custom Frameworks

S
Written by Shannon DeLange
Updated today

With Vanta, users can create custom frameworks and leverage Vanta's library of tests and evidence for your organization's security program. This is a Premium Solution, so if you feel it would benefit your company, please contact your Account Manager for more pricing information!

Building Custom Frameworks

  • From the left-hand navigation panel, select Frameworks

  • The Frameworks page will showcase current progress for frameworks your organization is adhering to and provide additional information for Vanta's available frameworks

  • From the Frameworks page, select + Add a Framework

  • Complete the information from the pop-up modal

  • When uploading files, keep the following information in mind:

    • The column names must be in the format of Section ID, Section Name, Section Description, Parent Section ID, and Control IDs.

Screenshot 2025-03-18 at 3.19.25 PM.png

The column values are validated against the following:

  • Section ID: must be non-empty and unique

  • Section Name: must be non-empty and unique

  • Section Description: no restrictions

  • Parent Section ID: Must point to another section ID

  • Control IDs: The IDs of the custom controls to list under this section

  • Section Type: Mark any parent sections explicitly as parents by filling in p. Rows left blank will be auto-populated as c and be considered child sections

    • Parent sections cannot have control ids mapped to them or parent sections of their own

    • For a custom framework upload to have a parent layer, at least one section must be marked as a parent during upload. Otherwise, it will turn into a custom framework with only child sections and no parent sections.

    • In a Framework with a Parent section, all child sections must have a parent section mapped to them

  • Capitalization differences are allowed

  • No extra white space is permitted

  • All columns are required, but Section Description, Parent Section ID, and Control IDs can be empty. Controls can be mapped to sections later on manually.

  • Once the information has been completed, select Next

  • From here, you will be asked to preview the Framework.

  • Select Import

Screen_Shot_2023-01-26_at_11.19.55_AM.png
  • The new custom framework will now be a tile available for viewing, editing, and monitoring from the Frameworks page

Adding Additional Controls

  • Find the custom framework you want to edit from the Frameworks page and select View Details.

  • Select + Create New Control

or

  • Choose from the custom controls you want to add to your custom framework

  • From the Mapped frameworks section, select Add

  • Add the desired Framework to be mapped back to this control

Screenshot 2025-03-03 at 4.39.40 PM.png

Removing a Control from a Custom Framework

  • From the Framework, select View "x" Controls

  • Select the three dots and choose to delete

Screen_Shot_2023-01-26_at_12.10.21_PM.png