# Frequently Asked Questions

This section answers common questions about using the Frameworks feature in Sprinto, including enabling frameworks, mapping controls, managing scope, and monitoring compliance readiness.

### FAQs

#### **1. What is a framework in Sprinto?**

A framework is a structured set of compliance requirements, such as SOC 2, ISO 27001, or a custom standard, used to guide and measure your organisation’s compliance readiness.

#### **2. Can I add my own framework?**

Yes. You can click **Add Own Framework** in the Frameworks section to create a custom framework, add criteria, and map relevant controls.

#### **3. What is the difference between Enabled and Available Frameworks?**

Enabled Frameworks are active in your account and contribute to your compliance tracking. Available Frameworks are those you can enable but are not currently in use.

#### **4. Can a control be mapped to more than one framework?**

Yes. A single control can be linked to multiple frameworks and criteria to reduce duplication of effort.

#### **5. How do I disable a framework?**

Select the framework, click **Manage Framework**, choose **Disable**, and confirm your choice. You can decide whether to remove or retain mapped controls.

#### **6. What happens if I mark a criterion as Not in scope?**

Criteria marked as *Not in scope* are excluded from readiness tracking, monitoring, and evidence collection for that framework.

#### **7. Can I change the scope of a criterion after enabling a framework?**

Yes. You can update the scope at any time to adapt to changes in regulations, contracts, or operational scope.

#### **8. How is readiness percentage calculated?**

Readiness is based on the number of in-scope criteria that have mapped controls and passing automated or workflow checks.

#### **9. What is the difference between automated checks and workflow checks?**

Automated checks are system-run validations, while workflow checks require manual action or evidence submission from your team.

#### **10. Can I export a framework readiness report?**

Yes. You can generate and export a readiness report for any enabled framework to share with auditors or stakeholders.