Secureframe Comply
Run day-to-day compliance: tests, policies, personnel, risks, vendors, and evidence across your frameworks.
By Brady and 1 other2 authors94 articles
FAQs: Frameworks and mappings: controls, tests, and cross-framework views
Framework Resources (SOC, ISO, and more)
Secureframe Framework offering
Scoping Rules and Frameworks
Creating Custom Frameworks
Using the Frameworks Views in Secureframe
Map Framework Requirements and Controls
Mark Framework Requirements and Controls as N/A
Export evidence from Controls and or Frameworks Page
Framework Scoping - Supporting Segregated Accounts
Policy 'Last Published' date: how it works and why it might not update
FAQs: Policies and acknowledgments: templates, mappings, and workflows
Overview of the Policies Page
Linking a published Policy to a Policy Test
How to write an effective Policy
Create and or Edit policies
Policy User Acknowledgement: How to publish and send policies
Assign a policy owner
Archive or Unarchive a policy
Policy Changelog
Out-of-scope personnel: why they may still show task statuses or appear in filters
Email domain filters: what “Included domains” really means (common gotchas)
FAQs: Personnel management: HRIS, onboarding, and common scenarios
Filtering Personnel by Email Domain
Master Index: Personnel Management
Managing Personnel
Understanding personnel statuses & scoping
How to handle Unlinked Accounts
Personnel Groups
Editing & Merging Personnel Records
Managing Domain Changes for Personnel in Secureframe
Access Roles / Role Based User Access (RBAC)
Why a test can show Pass when evidence looks empty (null/false or missing)
FAQs: Evidence and documentation: uploads, attachments, and proof in Secureframe
FAQs: Tests and controls: evidence, frameworks, and troubleshooting
GCP VPC Network and Route Logging Tests
AI Evidence Validation for Upload Test
Upload Test Guidance & Organizational Control
Custom Automated Tests (CAT)
Tests Page Overview: Test Types, Uploading Evidence, Filtering
Test Library
Custom Upload Tests (CUT)
Understanding Upload Tests: Intervals, Evidence Validity, Due Dates, and Tolerance Windows
Test Activity Dashboard
Comply AI: Cloud Remediation test guidance
Evidence Best Practices
JSON evidence for integration test (AWS, GCP, Azure)
Views and Exports
FAQs: Vendor risk management: assessments, workflows, and evidence
Vendor Risk Management (VRM) - Full Guide
Third Party Risk Management (TPRM) - Full Guide - replaced by newer version
How to add, edit or view Vendors
How to handle your first Vendor Risk Management review
Using Comply AI in Advanced Vendor Risk Management
Vendor Security Questionnaires and Requests for Information (RFI)