Getting started

1. On the dashboard, add a starter framework, or go to Controls and add your own.
2. Open each control, assign an owner and set its status. “Not applicable” needs a written reason.
3. Under Evidence, upload files or add links and notes, and tick the controls each one supports.
4. Under Policies, create a policy, edit the draft, and have an owner or admin approve it. Everyone is asked to acknowledge it.
5. Readiness = implemented controls ÷ applicable controls, per framework.