With Vanta, users can create custom frameworks and leverage Vanta's library of tests and evidence for your organization's security program. This is a Premium Solution, so if you feel it would benefit your company, please contact your Account Manager for more pricing information!
Building Custom Frameworks
- From the left-hand navigation panel, select Frameworks
- The Frameworks page will showcase current progress for frameworks your organization is adhering to and provide additional information for Vanta's available frameworks
- From the Frameworks page, select + Add a Framework
- Complete the information from the pop-up modal
- When uploading files, keep the following information in mind:
- The column names must be in the format of Section ID, Section Name, Section Description, Parent Section ID, and Control IDs.
The column values are validated against the following:
- Section ID: must be non-empty and unique
- Section Name: must be non-empty and unique
- Section Description: no restrictions
- Parent Section ID: Must point to another section ID
- Control IDs: The IDs of the custom controls to list under this section
- Section Type: Mark any parent sections explicitly as parents by filling in
p
. Rows left blank will be auto-populated asc
and be considered child sections
- Parent sections cannot have control ids mapped to them or parent sections of their own
- For a custom framework upload to have a parent layer, at least one section must be marked as a parent during upload. Otherwise, it will turn into a custom framework with only child sections and no parent sections
- In a Framework with a Parent section, all child sections must have a parent section mapped to them
- Capitalization differences are allowed
- No extra white space is permitted
- All columns are required, but Section Description, Parent Section ID, and Control IDs can be empty. Controls can be mapped to sections later on manually
- Once the information has been completed, select Next
- From here, you will be asked to preview the Framework.
- Select Import
- The new custom framework will now be a tile available for viewing, editing, and monitoring from the Frameworks page
Adding Additional Custom Controls
- Find the custom framework you want to edit from the Frameworks page and select View Details.
- Select + Create New Control
or
- Choose from the custom controls you want to add to your custom framework
- From the Mapped frameworks section, select Add
- Add the desired Framework to be mapped back to this control
Removing a Control from a Custom Framework
- From the Framework, select View "x" Controls
- Select the three dots and choose to delete