Build and run your compliance programme
Security or compliance lead

Build and run your compliance programme

Frameworks enrolled, controls approved, policies published to staff, and evidence collected and checked, ready for the audit.

Start the journey →14 steps · Command · Counsel
  1. 1
    CommandCommand

    Find your way around Command

    After you sign in, Command opens on the Dashboard. The top navigation has eight pages:

    Open this step →
  2. 2
    CommandFrameworks

    Enrol the frameworks that apply to you

    Who can do this: Admin.

    To enrol, switch on the card's switch, or click Enroll. Command shows the framework's short name followed by enrolled.

    Open this step →
  3. 3
    CommandFrameworks

    Apply a template pack

    Who can do this: Admin and Policy editor.

    A template pack is a ready-made baseline. Applying one enrols its frameworks, drafts its controls and writes a policy document for each group of controls. Command ships nine packs, including Dutch municipality — BIO2 baseline, SME — ISO…

    Open this step →
  4. 4
    CommandFrameworks

    Find your gaps

    The Gap analysis tab shows, clause by clause, where your controls cover a framework and where they do not.

    Open this step →
  5. 5
    CommandFrameworks

    Close a gap

    Who can do this: Admin.

    Command can draft a control for a gap in the background.

    Open this step →
  6. 6
    CommandControls

    Write and refine a control

    Who can do this: Admin and Policy editor.

    There is no Save button. Command saves your changes when you leave edit mode.

    Open this step →
  7. 7
    CommandControls

    Review and approve the control

    Who can do this: Admin and Policy editor.

    Use a review when a second person should check a control before it is published.

    Open this step →
  8. 8
    CommandPolicies

    Generate your policies

    Who can do this: Admin and Policy editor.

    Command has a catalogue of 33 policy documents, from an Access Control Policy to a Supplier & Supply Chain Security Policy. You choose which to draft.

    Open this step →
  9. 9
    CommandPolicies

    Review and edit a policy

    Who can edit: Admin and Policy editor.

    Click a document in the list to open the policy editor. The document is on the right, the AI co-pilot on the left. Drag the divider to change their widths; double-click it to reset.

    Open this step →
  10. 10
    CommandPolicies

    Approve it and publish it to staff

    Who can do this: Admin and Policy editor.

    Approving a document produces the final files and sends them to your staff in Counsel, in one step.

    Open this step →
  11. 11
    CommandEvidence

    Ask colleagues for evidence

    Who can do this: Admin and Policy editor. A Security manager can draft a request but not send it.

    You can ask the people who hold the evidence, such as a team lead or an HR officer, to provide it. They answer in Counsel, and you review what they send in Command.

    Open this step →
  12. 12
    CounselEvidence requests

    Staff answer the request in Counsel

    Select the request to open it.

    Open this step →
  13. 13
    CommandEvidence

    Check the evidence with the AI auditor

    Who can do this: Admin, Auditor and Security manager. A Policy editor cannot run a check.

    The AI evidence auditor judges whether one evidence file proves one control. It looks up the framework clauses the control is mapped to, can consult web pages, and cites the pages, clauses or addresses it relied on. Its verdict is…

    Open this step →
  14. 14
    CommandAudit log

    Show the auditor who did what

    Who can do this: Admin.

    Click Export CSV. Command downloads the file audit-log.csv and shows Exported {n} events to CSV.

    Open this step →