Compliance modules and controls

The compliance work is organised in sixteen modules, grouped in volumes, such as Data Inventory and Discovery, Consent and Preference Management, and Incident and Breach Management. Each module holds the controls for the client’s laws.

Opening a module

Open the client and choose Compliance in the left menu to see the modules, each with its score. Each module has two tabs:

• Guide: what the module is about and how to approach it.
• Controls: the controls to assess for this client.

Working through controls

• Tick a control when it is in place. The date it was done is recorded and the score updates at once.
• Add a note with the pencil button: evidence, who confirmed it, or what is still missing. Notes save when you click outside the box; the status under the box shows “Saving…”, then “Saved”.
• Each control shows its law and, in brackets after the description, its legal reference. Critical controls are marked.

Controls that do not apply

Some controls can be marked Not applicable, for example one that applies only to organisations that process children’s data. Choose Not applicable, write why it does not apply (a reason is required), and save. The control is greyed out, its reason is shown, and it is left out of every score. Choose Undo N/A to bring it back.

Finding controls

Use the filters above the list: All controls, Not ticked, Critical and, where some controls can be Not applicable, Not applicable. The search box finds controls by their text.

The figures at the top

• Controls ticked: the module’s score, with the count of ticked controls and any marked N/A.
• Critical controls: how many critical controls the module has.
• Not assessed yet: controls not yet ticked or marked Not applicable.