Linking Controls to Policies

When you create a policy, Mycroft automatically creates one or more Policy Tests for it:

• Published version test: Always created. Checks that the policy has a published version.

• Employee acceptance test: Created only if Employee acceptance was enabled during policy creation (set to All employees or Select employees). Tracks whether the required employees have acknowledged the policy.

In addition, if the Link to ERM-8: Policies Sign-off Control checkbox was left checked during policy creation, the policy is automatically connected to the ERM-8 control. This is not a test, but a direct control linkage that tracks the policy's publication and approval in ERM-8.

These Policy Tests are the mechanism through which policies connect to controls. You can link a policy to additional controls in two ways:

From the policy's Controls tab

1. Open the Policy detail page.

2. Select the Controls tab.

3. Use the controls table to view and manage the controls linked to this policy.

From a Policy Test in Tests

1. Go to Tests in the sidebar.

2. Find the Policy Test that corresponds to your policy. Policy tests share the policy's name and are listed with the type Policy. If a policy has both a published version test and an employee acceptance test, they will appear as separate entries.

3. Open the test and select the Controls tab.

4. Select + Add controls and choose the control(s) you want to link.

After linking:

• The policy's Controls tab reflects the connected controls.

• The control's Testing tab shows the policy test as one of its associated tests, with pass/fail status visible alongside other automated and document tests.

To unlink a control:

Remove the association from either the Policy Test's Controls tab or the policy's Controls tab directly.

Note: There is no required way to connect policies to controls — link them in whatever way best matches your organization's preferences and framework requirements.