ACL Services is now Galvanize, and ACL GRC is now HighBond. Learn more >

Frameworks quick start

This quick start illustrates a simple workflow you can use to build a project using a framework.

Why should I use a framework?

A framework is a master copy of risks and controls that you can use to build projects. You can use frameworks to manage risk and control changes across multiple projects, or to build the main structure of alike projects, and customize those projects as needed.

Before you start

To complete this quick start, you must be assigned the Projects Admin or Project Creator privilege, and you need to create at least one project. You should also read this topic to become familiar with frameworks and how to use them effectively: Managing controls using frameworks.



Interface terms are customizable. Depending on your organization's settings, some terms may be different.

1. Create a framework

  1. From the Projects homepage, under Planning And Results, click Frameworks.
  2. Click Start a New Framework.
  3. Enter a name and description for the framework.
  4. Select a project type from the drop-down list.

    Ensure that you select a workflow (Internal Control or Workplan) that matches the workflow of the project you want to build. For more information, see Workflows and project types.

  5. Click Save.

    Result The new framework is created.

2. Define processes

  1. Within the framework, click the Processes tab.
  2. Click Add Process, enter the details of the process, and click Save.
  3. Repeat step 2 to add additional processes.

    Result The processes are added to the framework.

3. Bulk upload risks and controls

  1. Within the framework, click Settings.
  2. Click the Bulk Upload subtab.
  3. Download the Excel template.

  4. Enter the risks and controls in the template.
  5. Upload the completed template to the Bulk Upload page.

    Result Risks and controls are uploaded within the appropriate processes in the framework.

4. Associate risks and controls

  1. Within the framework, click Processes.
  2. Click Go To beside the appropriate process and select the Risk Control Matrix subtab.
  3. Click Risk next to the View by label.
  4. Click Associate Control next to the appropriate risk.
  5. Select the appropriate control(s).
  6. Optional. Specify a control weight to indicate how much of the control mitigates the risk.
  7. Click Save.

    Result The risks and controls are associated.

5. Import controls to a project

  1. Click the organization drop-down list, click Projects, and click the project that you want to import controls to.
  2. Click the Fieldwork tab.
  3. Click Go To next to the appropriate process and select Risk Control Matrix.
  4. Next to View by:, select Control, and click Import Control.
  5. Select the framework that you want to import controls from.

  6. Select the controls you want to import, and click Import.

    Result The risks and controls are imported to the project and are linked to the risks and controls in the framework.

What to do next

If you want to use the framework to build the main structure of a project, you are done. Simply update information in the project, as needed.

If you want to ensure that updates made to risks and controls in a framework sync to the appropriate projects, see Syncing projects with frameworks.

© 2019 ACL Services Ltd. dba Galvanize.

Wednesday, May 22, 2019