Skip to main content

Compliance Management

Compliance Management holds the objects your program is built from, and they form a chain: policies and procedures document what you intend to do, controls operationalize those policies and map to the standards you're pursuing, evidence attaches to controls to prove they operate, and programs bundle all of it for a given audit period. You can grant auditors access directly to Openlane instead of uploading evidence to third-party portals.

How compliance objects relate in Openlane

If you are new to compliance concepts or preparing for your first audit, we suggest starting with GRC Fundamentals.