Excluding a Test or Attestation (Updated UI)

Click here to view the documentation for the old UI of this feature.

TrustOps allows users to exclude specific resource controls or tests that do not apply to their business environment.

Exclusion Process

1. Select the Test or Attestation: Choose the control or test you want to exclude.
2. Provide a Business Justification: A justification is required to document the reason for exclusion.
3. Global Exclusion Rule: Once excluded, the test or attestation remains excluded until it is explicitly re-included.

For effective compliance management, review the TrustCloud Common Controls Framework (TCCCF) to understand control requirements and set up your program accordingly.

How can TrustOps help in excluding a test or self-attestation?

TrustOps allows users to exclude tests or self-attestations that are not relevant to their business environment.

Exclusion Process

1. Select the Test or attestation: Identify the test or attestation to exclude.
2. Provide a Business Justification: A justification is required to document the reason for exclusion.
3. Global Exclusion Rule: Once excluded, the test or attestation remains excluded until explicitly re-included.

For a comprehensive compliance setup, review the TrustCloud Common Controls Framework (TCCCF) to understand control requirements and ensure alignment with your program.

Read our GRC Launchpad article: What are common controls and why do you need one?

Excluding a test

Excluding a test,

1. Go to “Program” from your TrustOps program and select “Controls.”
2. On the “Controls” page, click on the control.
3. Click on the three dots in front of the test and select “Exclude Test.”
   

To exclude multiple tests,

1. Select multiple tests that you want to exclude and click on the “Exclude Tests” link at the top of the section.
   
2. Click on “Exclude Tests” to confirm.
   The following screenshot shows the pop-up window asking to confirm, excluding tests.
   
   

Excluding an attestation

To exclude a particular attestation,

1. Go to “Program” from your TrustOps program and select “Controls.”
2. On the “Controls” page, click on the control.
3. Under the “Self-Attestation” section, click on the three dots in front of the attestation that you want to exclude.
4. Select “Exclude Attestation.”
   The following screenshot shows how to exclude a particular attestation.
   
5. Click on “Exclude Tests” to confirm.

These attestations will be moved to the “Excluded” section.

Have you checked out TrustTalks? Your go-to podcast series by TrustCloud that explores the evolving landscape of security and GRC.