Core capacities
If you have several frameworks you might have controls that are relevant for both. Instead of having the same control documented twice for each framework IQ can mark this control as overlapping. The result will be less duplicate work and cleaner compliance documentation.
Common Workflow & Example Prompts
Workflow: Analysing controls over frameworks
Use IQ to analyse which controls overlap between all your frameworks. Linking an overlap does not copy status or evidence between controls. Each control is still judged on its own status and linked evidence.
Example Prompt:
Use the predefined prompt available : "Find overlapping controls" or write your own prompt.
To write you own prompt, you can use this example:
"Analyse controls across my frameworks and find the controls that cover the same requirement. Give suggestions for controls to link as overlapping so one implementation can serve both. Give a reason why these controls overlap"
What IQ Does:
Analyses all your frameworks and their requirements.
Suggests a list of partial and/or full overlaps
Links controls that cover the same requirement.
Ask IQ to map the controls as overlapping, and review them before allowing it.
If you need to identify overlapping controls between specific frameworks only, and not all frameworks, simply change the prompt.
Below is an example of a prompt you can use: "Compare the control names and descriptions across the GDPR and ISO 27001 frameworks and give me a list of candidate overlaps, marked as full or partial".