Compliance Monitoring & Testing
MT-01Keep a control inventory organized by risk area
How Leela would run itContinuous · maintained as controls change; reviewed with the annual program review
From the policy libraryThe requirement
Every control the program relies on is listed in one inventory, grouped by compliance risk area, so that monitoring and testing can be planned against it and an examiner can see what the Company claims to operate.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
List each control with its risk area, owner, cadence, and evidence. Add, retire, or reclassify controls whenever a product, vendor, or policy changes.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Control inventoryRegister with one row per control: area, owner, cadence, evidence location
Evidence
Control inventory
Compliance Monitoring & Testing §2
1
of 1 record
The work and the records come from this obligation in the policy library.