You are here:
Set Up Controls Management for IT Compliance
Bring Controls Management online for your org. Turn on the feature in Salesforce Go, enable the control implementation methods that match how your compliance team works, and assign permission sets so your admins can start authoring controls, building validation procedures, and running compliance tests.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service. |
| User Permissions Needed | |
|---|---|
| To turn on Controls Management, enable implementation methods, and assign permission sets: | Compliance Admin permission set |
Make sure your org has the IT Compliance Employee Add-on, Incident Management Add-on, Business Rules Engine (Runtime and Standard Add-ons), and Context-Based Platform Add-on licenses provisioned. Compliance Validation with AI also requires Einstein Generative AI.
Controls Management gives your compliance team one place to author the safeguards that enforce your regulations, policies, and risk mitigations. Compliance officers create and version compliance controls, group them into validation procedures, and pick the implementation method that best fits each control, including Business Rules Engine, Apex, LLM prompts, Action Plans, or Document Checklists.
- On the Salesforce Go page, click the Features tab, and then search for and select Accelerate Trust with Unified Risk and Compliance.
- Next to Compliance Controls, click Set Up.
- Turn on the Compliance Controls toggle.
- Under Complete the Required Steps, next to Implement Compliance Controls, click Go to Feature Page.
-
On the Implement Compliance Controls page, turn on the
implementation methods that match how your compliance team enforces controls.
Implementation method When to turn it on Control Implementation Using Apex Implement complex validation control logic using Apex classes to ensure that any action taken within a workflow is compliant. Control Implementation Using BRE Configure validation control logic using Business Rules Engine and expression sets to ensure any action taken within a workflow is compliant. Control Implementation Using Action Plans Track non-validation compliance tasks using Action Plans and templates to ensure all required tasks are completed. Control Implementation Using Document Checklist Track required documents using checklist items and approval workflows to ensure all compliance documents are collected. Control Implementation Using Compliant Data Sharing Grant access to sensitive data using Compliant Data Sharing so that users or groups only see data based on contextual roles. Effectiveness Reports Show the effectiveness of compliance controls, identify gaps, and monitor and report legal and regulatory compliance. Compliance Control Testing Test controls at key stages to confirm they work as designed, mitigate risks, and meet compliance requirements. Compliance Validation with AI Automate compliance control validation by using AI prompt templates to analyze unstructured content like emails and transcripts against your policies. - For each implementation method you turned on, click Keep Going and complete the configuration steps for that method.
- Return to the Compliance Controls feature page, click Manage User Access, and assign the Compliance Admin permission set to the administrators who configure controls and to the compliance users who author controls and validation procedures.
