Update Controls and Criteria for an Automated Audit

Learn how to add, remove, and manage controls and criteria within an automated audit in Sprinto.

Sprinto allows you to customise the scope of an automated audit by updating the controls and criteria included in the audit. You can:

• Remove controls that are not relevant to the audit

• Add controls that were previously excluded

• Include or exclude entire criteria groups

• Select or deselect individual sub-criteria within a framework

This helps you tailor the audit scope based on your compliance requirements and auditor expectations.

Before you begin

• Ensure you have access to the Audits module in Sprinto.

• Ensure the automated audit has already been created.

Update controls and criteria for an automated audit

1. Log in to the Sprinto Dashboard and navigate to Audits.

1. Select the automated audit that you want to update.

2. In the Summary tab, click the Edit icon next to Frameworks and controls.

1. In the Frameworks & controls drawer, use the following tabs to manage the audit scope:

Controls included in audit

This tab displays all controls currently included in the audit.

To remove a control:

1. Locate the control you want to exclude.

2. Click Remove next to the control.

3. In the confirmation dialog, click Confirm.

The selected control and its associated evidence are removed from the audit and moved to the Not added in audit tab.

Not added in audit

This tab displays controls that are currently excluded from the audit.

To add a control:

1. Locate the control you want to include.

2. Click Add next to the control.

The control is immediately added to the audit and moved to the Controls included in audit tab.

Criteria view

This tab allows you to manage criteria and sub-criteria for the selected framework.

You can:

• Select or deselect an entire criteria group.

• Select or deselect individual sub-criteria within a criteria group.

Changes made here automatically update the controls included in the audit.

Save the changes

After updating the controls or criteria:

1. Review your changes.

2. Click Save.

A confirmation message appears after the audit criteria are updated successfully.

Note

• Removing a control excludes its associated evidence from the audit.

• You can re-add removed controls at any time from the Not added in audit tab.

• Updating criteria may automatically increase or reduce the number of controls included in the audit.