# Control Management

## Managing Control Activities

* Navigate to **GRC / Control Management / Control Activity** and select the audit name to view the related control items.
* Click on a control item to start entering evidence and actions. Actions include:
  * Double-click **Answer** to provide responses.
  * Assign users via the pencil icon and select from system-defined users or groups.
  * Select **Compliance State** (Compliant / Not Compliant).
  * Set **Control Applicable** (Yes / No) and fill **Applicability Reason**.
  * Enter detailed notes in **Answer** and click OK. Previous answers are automatically populated for updates.

## Basic Parameters

* Previously entered answers can be viewed, updated, or added.
* **Control Implemented** can be set (Yes / No).
* Corrective or Preventive actions can be selected or created via **Create** link.
* Action plans can also be created via **GRC / Evidence & Parameter Management / Create**.

## Control Mappings

* Map control items to related standards, risks, evidences, documents, document templates, ToDo tasks, discovered assets, and non-IT assets.
* AI assistance is available via the robot icon for automatic mapping of documents and templates.
* Use the three-dot menu **Discover Related Mappings** to automatically map controls across standards.

## Activities and Notes

* Add activities via **Add Activity**.
* Notes for each control can be added, updated, or edited.

## Save & Notify

* Click **Save** to store updates.
* Click **Save and Notify Owner(s)** to update the owner with an email notification.
* Use **Update Related Controls** or **Update Based on Risk** from the three-dot menu for automatic updates.

## GRC Role Management

* Roles determine which users can see which menus and take which actions.
* Roles are managed under **MSSP / Tenant Management / Role Management**.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudcyte.com/getting-started/grc-management/control-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
