Frequently Asked Questions

Find answers to frequently asked questions about managing frameworks in Sprinto.

This section answers common questions about using the Frameworks feature in Sprinto, including enabling frameworks, mapping controls, managing scope, and monitoring compliance readiness.

FAQs

1. What is a framework in Sprinto?

A framework is a structured set of compliance requirements, such as SOC 2, ISO 27001, or a custom standard, used to guide and measure your organisation’s compliance readiness.

2. Can I add my own framework?

Yes. You can click Add Own Framework in the Frameworks section to create a custom framework, add criteria, and map relevant controls.

3. What is the difference between Enabled and Available Frameworks?

Enabled Frameworks are active in your account and contribute to your compliance tracking. Available Frameworks are those you can enable but are not currently in use.

4. Can a control be mapped to more than one framework?

Yes. A single control can be linked to multiple frameworks and criteria to reduce duplication of effort.

5. How do I disable a framework?

Select the framework, click Manage Framework, choose Disable, and confirm your choice. You can decide whether to remove or retain mapped controls.

6. What happens if I mark a criterion as Not in scope?

Criteria marked as Not in scope are excluded from readiness tracking, monitoring, and evidence collection for that framework.

7. Can I change the scope of a criterion after enabling a framework?

Yes. You can update the scope at any time to adapt to changes in regulations, contracts, or operational scope.

8. How is readiness percentage calculated?

Readiness is based on the number of in-scope criteria that have mapped controls and passing automated or workflow checks.

9. What is the difference between automated checks and workflow checks?

Automated checks are system-run validations, while workflow checks require manual action or evidence submission from your team.

10. Can I export a framework readiness report?

Yes. You can generate and export a readiness report for any enabled framework to share with auditors or stakeholders.