Control Set to Authority Gap Analysis - linking issues & actions to provisions

Learn how to link issues and issue actions to provisions while analyzing gaps between your internal policies and industry standards

This article discusses linking issues to provisions specifically as part of the Control Set to Authority Gap Analysis functionality.

For linking provisions to issues within the Issues & Incidents registers, head here.

 

When you map your internal policies or control sets to standards/regulations, or authority documents, to ensure compliance, you may identify gaps that need to be actioned.

You can record these gaps by linking issues and any remediating actions to the applicable provision within the authority, and manage these issues from the Issues & Incidents registers.

Table of contents:

  1. Creating a new issue
  2. Linking an existing issue
  3. Viewing linked issues
    1. Issue actions
  4. Issues & Incidents registers view

Make sure that you are in the Mappings tab of a control set in Edit status, and that you are mapping Provisions (source) to Controls (target). You can use the Authority filter for the provisions you need to work with.

Click on a provision which you have identified a gap, e.g. a lack of control that addresses it, and click on in the side panel next to Issues & actions.

From here, you can either create a new issue in the Create new tab, or select an existing issue under the Existing tab. Once the issue is linked to this provision, you can see this linkage in the Issues & Incidents registers.

Creating a new issue

To create a new issue, give it a name and hit Enter on the keyboard.

The issue is now in the Issues & Incidents registers, and it is linked to this provision.

You can click on its name to update it.

You can perform the following actions. Changes are automatically saved.

  • Update the workflow status of the issue
  • Set the priority of the issue
  • Select the issue type
  • Select the owner of the issue
  • Update who identified the issue
  • Update the date the issue was reported
  • Set the due date of the issue
  • Add a description
  • Create an issue action

You can make changes to these details, or update custom fields, tags, linked data, and attachments, later from within the Issues & Incidents registers,

You can also bulk update priority & workflow for multiple issues from the registers.

Linking an existing issue

To link an issue that already exists in the Issues & Incidents registers, e.g. as part of an ongoing effort to manage similar provisions, select the Existing tab.

Click on an issue to see more details. To link an issue to the question response, click Add to the left of it. To unlink, click the tick.

You can switch between All and Linked for all existing issues in the registers, or all issues linked to this provision.

Viewing linked issues

To view all the provision's linked issues, click the back arrow near the top or click on the provision again to go back to the Provision details side panel.

The list of issues is displayed under Issues & actions.

Click the 3 dots next to an issue to Edit it or to Unlink it from this provision. Click on an issue to see more or to add actions.

An issue unlinked from a provision still exists in the Issues & Incidents registers. You can re-link it by clicking and searching for it in the Existing tab.

Issue actions

After creating a new issue or linking an existing issue, you may create an action to address it.

You can also do this later from within the Issues & Incidents registers.

When in the Add issue or Issue details side panels, click on the next to Actions to create a new action for this issue.

Give the action a name and hit Enter. Here, you can click on its name to edit it, or add more details.

Changes are automatically saved.

Issues & Incidents registers view

Head to Issues & Incidents Registers and click into an issue that you linked or created against a provision.

In the issue Overview tab, you can find the provision linkage in the side panel under the Linked data tab.

Click it to see more details.

You can find any actions you created against this issue in the Issue actions tab.

Your next step may be assigning or completing an action that remediates this issue.