{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":17159,"path":"governance-risk-compliance/grc-compliance-management-workspace/create-ctrl-objective-ws.md","title":null,"bundle":null,"doc_type":null,"release":null,"body":"---\ntitle: Create a control objective using the Compliance Workspace\ndescription: A control objective is an objective, direction, or standard that acts as guidance for company interactions and operations. Control objectives can be categorized, classified, and related to policies using the Compliance Workspace.\nlocale: en-US\ncanonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-compliance-management-workspace/create-ctrl-objective-ws.html\nrelease: australia\nproduct: GRC: Compliance Management Workspace\nclassification: grc-compliance-management-workspace\ntopic_type: task\nlast_updated: \"2026-03-12\"\nreading_time_minutes: 4\nbreadcrumb: [Manage control objectives and policies, Use, GRC Compliance workspace, Use, Policy and Compliance Management, Governance, Risk, and Compliance]\n---\n\n# Create a control objective using the Compliance Workspace\n\nA control objective is an objective, direction, or standard that acts as guidance for company interactions and operations. Control objectives can be categorized, classified, and related to policies using the Compliance Workspace.\n\n## Before you begin\n\nRole required: sn\\_compliance.admin, sn\\_compliance.manager, sn\\_compliance.user\n\n## Procedure\n\n1. Navigate to **All** > **Policy and Compliance** > **Compliance Workspace**.\n\n2. In the Compliance Workspace, click the \\[Omitted image \"ws-list-icon.png\"\\] Alt text: List icon icon.\n\n3. Navigate to **Compliance library** > **Control objectives**.\n\n4. Click the **Create** list and select **Control objective**.\n\n5. On the form, fill in the fields.\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nName\n\n\n\nName of the control objective.\n\n
\n\nSource\n\n\n\nSource of the policy. For example, if the statement is from the a third-party provider, indicate which one.\n\n
\n\nSource ID\n\n\n\nUnique identification number used by the source to catalog this authority document.\n\n
\n\nReference\n\n\n\nUnique numerical identifier.\n\n
\n\nParent\n\n\n\nControl objective that is not a child of the current control objective. This is to avoid cyclic parent – child relationship.\n\n
\n\nCompliance Score Percentage\n\n\n\nCompliance score percentage calculated for this control objective and its color code: - Green: 80 and higher\n- Yellow: 80 to 50\n- Red: below 50\n\n\n
\n\nActive\n\n\n\nOption that indicates whether a policy is active.\n\n
\n\nCreates controls automatically\n\n\n\nOption that indicates that controls are automatically created from the control objective. **Note:** Select this option if the control objective can also serve as the control.\n\n
\n\nCategory\n\n\n\nList of options:- Acquisition or sale of facilities, technology, and services\n- Audits and risk management\n- Compliance and Governance Manual of Style\n- Human Resources management\n- Leadership and high-level objectives\n- Monitoring and measurement\n- Operational management\n- Physical and environmental protection\n- Privacy protection for information and data\n- Records management\n- System hardening through configuration management\n- Systems continuity\n- Systems design, build, and implementation\n- Technical security\n- Third party and supply chain oversight\n- Root\n- Deprecated\n\n\n
\n\nClassification\n\n\n\nList of options:- Preventive\n- Corrective\n- Detective\n\n\n
\n\nType\n\n\n\nList of options:- Acquisition/Sale of Assets or Services\n- Actionable Reports or Measurements\n- Audits and Risk Management\n- Behavior\n- Business Processes\n- Communicate\n- Configuration\n- Data and Information Management\n- Duplicate\n- Establish Roles\n- Establish/Maintain Documentation\n- Human Resources Management\n- Investigate\n- IT Impact Zone\n- Log Management\n- Maintenance\n- Monitor and Evaluate Occurrences\n- Physical and Environmental Protection\n- Process or Activity\n- Records Management\n- Systems Continuity\n- Systems Design, Build, and Implementation\n- Technical Security\n- Testing\n- Training\n\n\n
\n\nAttestation method\n\n\n\nList of options:- Classic attestation: ServiceNow AI Platform classic method of control assessment.\n- Attestation: Method by which controls are assessed.\n\n**Note:** If you select Attestation, then the Attestation field is populated with **GRC Attestation**\n\n
\n\nAttestation\n\n\n\n**GRC Attestation** is chosen by default.**Note:** If the user changes the control attestation, the related control objective attestation type is also changed.\n\n
\n\nIssue group rule\n\n\n\nGroup rule assigned to this control objective.\n\n
\n\nDescription\n\n\n\nDescription of the control objective.\n\n
6. Click **Save**.\n\n To view and manage the details of the control objective that you created, see [Manage a control objective from the overview page](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-compliance-management-workspace/co-overview-pc-ws.md).\n\n The control objective is created and all related lists are visible.\n\n - A control is created for every control objective when a policy is associated with an entity.\n - The control attributes default to the same attributes as the related control objective.\n7. From the **Overview** page, click the **More** tabs and select **Issues** tab.\n\n You can add existing one or more related issues to the control objective that you created. By mapping the existing issues to the control objective, you can reduce the count of open issues on the control objective.\n\n 1. Click the **Add** button.\n\n 2. Select the related issue or issues from the Issues pop-up.\n\n 3. Click **Add**.\n\n The selected issues are added to the control objective as related issues and an m2m relationship is created between the control objective and the issues in issue to control objective \\[sn\\_grc\\_m2m\\_issue\\_content\\] table. You can also create an issue for the control objective by clicking the **New** button.\n\n 4. To remove an issue that is mapped to the control objective, select the issue and click **Remove**.\n\n The remove action only removes the mapping between the control objective and the issue. The action doesn’t delete the issue record.\n\n **Note:** The UI action buttons such as New, Add, Remove aren’t available if the control objective is in Retired state.\n\n\n## What to do next\n\nIf you’re implementing the [Policy and Compliance Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/policy-compliance-impl-checklist.md) software, return to the [Policy and Compliance Management setup checklist](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/policy-and-compliance-management/policy-compliance-impl-checklist.md) and proceed to the next step.\n\n"}}