Your controls, extracted, connected and governed.
RiskVantis uses the Secure Controls Framework as its canonical control layer. Your own controls, including those written inside policies, live in one register mapped to it, so every framework is reached through a single set of controls.
| Control | Description | Owner | Frequency |
|---|---|---|---|
| C-AC-04 | Quarterly access recertification | IT Ops | Quarterly |
| C-CR-02 | Encryption of data at rest | Platform | Continuous |
| C-VM-01 | Monthly vulnerability scanning | SecOps | Monthly |
| C-HR-03 | Leaver access removed in 24h | HR / IT | Event |
| C-BC-01 | Annual BCP test | Resilience | Annual |
Illustration with sample data
What Control Library & Document Controls does
Most organisations already describe their controls inside policies nobody has time to re-read. RiskVantis extracts those controls and keeps them as Control Register records, each with a CTRL- identifier, objective, owner, frequency and applicable assets. Documents reference the controls rather than copying them, and each approved document version pins the control versions it contains.
Adding, changing or removing a document control is a governed proposal: a draft control version linked to a draft document version, approved by the affected Control Owners, the document owner and a CISO. Look for Similar Controls flags likely duplicates, and the SCF crosswalk relates your controls to every installed framework. You can also bring your own framework, such as an internal standard or customer contract, into the Framework Library.
Key capabilities
Canonical SCF layer
The Secure Controls Framework connects every installed framework.
Extraction from policies
Controls pulled from documents into the register, with their source recorded.
One control record
Documents reference register controls; approved versions pin them.
Governed change
Control changes are proposals that must be approved before they apply.
Duplicate detection
Similar controls suggested for consolidation, never merged automatically.
Your own frameworks
Add internal standards or contractual requirements alongside shipped frameworks.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Control Library & Document Controls changes for your programme.
Fewer duplicate controls
A common control set mapped across frameworks removes redundant controls.
Policy ↔ control alignment
Control wording and policy text can never drift apart.
Less initial inventory work
Extraction replaces manual control cataloguing.
Built on real controls
Mappings and applicability decisions give you a ready SoA.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Upload policies
Add documents to the library.
Extract
AI identifies controls and their attributes.
Map
Relate controls to SCF and every framework through the crosswalk.
Govern
Changes flow through approval with versioning.
Supports your obligations.
Control Library & Document Controls contributes evidence and coverage to these frameworks and regulations.
Common questions.
Is there a separate control list per document?
No. There is one Control Register. Documents reference its controls, and approved versions pin the control versions they contain.
What if I change a control's wording?
The change becomes a draft proposal and is applied only when the document version that shows it is approved.
Can we add our own framework?
Yes. Create a framework in the Framework Library, or import one from Excel.
Works better together.
AI Control Mapping
Map risks, findings, evidence, policy controls, internal processes and benchmark controls to canonical controls. AI drafts each mapping, assessors confirm it, and every…
Learn more →Compliance ManagementControl Register, Testing & RACI
One register for your own controls, with versioned definitions, scoped RACI, assurance tests that count only after independent review, evidence requirements with…
Learn more →Compliance ManagementPolicy & Process Library
Draft policies and processes with AI and keep the controls inside them as governed register controls. Approvals route by what changed, every document is reviewed on…
Learn more →See Control Library & Document Controls in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.