Setting Up Compliance Frameworks

Compliance Frameworks

Frameworks are the foundation of your compliance program. They define the standards your organization must meet. You can create a framework from a pre-built template or start from scratch.

Using a Pre-Built Template

ISO Mate includes three pre-built templates that scaffold a complete framework with one click:

• ISO 27001: Information security management with 93 controls, 16 policies, and 15 operational procedures.
• GDPR: Data protection and privacy with 47 controls, 18 policies, and 15 operational procedures.
• General Business Policies: Governance, HR, health and safety, IT, and financial operations with 25 controls, 25 policies, and 18 operational procedures.

To scaffold a framework from a template:

1. Navigate to Compliance > Frameworks.
2. Click Add.
3. Select the template you want to use.
4. Choose your preferred language (English, German, or Spanish).
5. Click Scaffold Framework.

The scaffold creates all requirements, controls, draft policies with real content, operational procedures with step-by-step guidance, and an “All Staff” user group with the relevant policies pre-assigned. Review and publish the policies, then add your team members to the user group for attestation.

Creating a Framework from Scratch

1. Navigate to Compliance > Frameworks.
2. Click Add.
3. Select Create from Scratch.
4. Enter the framework name and description.
5. Click Save.

Adding Requirements

1. Navigate to Compliance > Requirements.
2. Click Add.
3. Enter the requirement ID, title, and description.
4. Select the framework this requirement belongs to.
5. Click Save.

Compliance Dashboard

Navigate to Compliance > Dashboard to see summary widgets showing total frameworks, total controls, compliance percentage, and overdue items.

Exporting

Export frameworks and requirements to CSV or PDF for audit documentation.