New controls are added on the framework readiness page, under Implemented controls. Open the framework from Governance & Assurance. The route is /app/governance-assurance/framework/ followed by the framework id.
New control
New control asks for the title, the requirement, the intention, the status, and a reference ID. You can also link catalog requirements at the same time. Status starts as draft if you do not choose another. Saving opens the new control so you can finish implementation, tests, and links.
The reference is the ID shown in the register. For ISO 27001, C.4.1 is a clause and A.5.1 is an Annex A control. Other examples are CC6.1 or an internal code such as AC-01. Leave it blank only when the control has no reference.
Examples and deletion
Load examples brings in sample controls for that framework and links related examples together. Use it when you want a starting set rather than a blank control.
Tick rows and use Delete selected to remove them. Linked framework assignments for those controls are removed with them. The all-frameworks register is for finding and opening controls; create and delete sit on the framework page.