Loading
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Controls Management for IT Compliance

          Controls Management for IT Compliance

          Define the safeguards that enforce your compliance policies and satisfy external regulations. Compliance controls are the practical, testable checks that turn policy intent into measurable protection, mitigate registered risks, and produce the evidence external auditors rely on.

          Required Editions

          Available in: Lightning Experience
          Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service.
          • Controls Management Workflow for IT Compliance
            Follow how a compliance team creates, tests, and maintains compliance controls that enforce policies, satisfy regulations, and mitigate risks. See how controls are mapped to risks, business operations processes, and assets, and how control testing feeds into evidence collection and remediation workflows.
          • Set Up Controls Management for IT Compliance
            Bring Controls Management online for your org. Turn on the feature in Salesforce Go, enable the control implementation methods that match how your compliance team works, and assign permission sets so your admins can start authoring controls, building validation procedures, and running compliance tests.
          • Work with Controls for IT Compliance
            Author compliance controls, build validation procedures, and run compliance tests by using Process Compliance Navigator. IT Compliance shares the Controls Management capability with Process Compliance Navigator, so your compliance team uses the same authoring experience to define controls that enforce ISO 27001 and other compliance frameworks across your IT processes.
          • Types of Controls in IT Compliance
            IT Compliance supports multiple control types depending on how they operate and how they're validated.
          • How Control Effectiveness Drives Risk Scoring
            See how control effectiveness ratings drive residual risk calculations, how control failures automatically increase risk scores, and how risk owners monitor which controls protect their risks.
           
          Loading
          Salesforce Help | Article