Skip to main content
ISO 27001, SOC 2, GDPR, the EU AI Act, and the other frameworks in the catalog each bring a set of controls. Keldyn tracks them in two places: Org Controls for the whole organization, and the workspace of each use case for one system.

Organization vs. use case

Enable a framework

1

Open framework alignment

For the organization, go to Org Controls and select Add Framework. For a use case, open its workspace and select Add Framework (or the Frameworks page).
2

Select frameworks

Choose the frameworks that apply. Active frameworks appear in their own tabs.
3

Complete the questionnaire

Each framework has a short questionnaire. Select Continue questionnaire and answer the questions so Keldyn can scope the right controls.

Track control implementation

Each framework tab shows its Control Requirements as a list. Expand a control to see its description, implementation guidance, underlying threat, finding, and evidence. For each control you can:
  • Set the status. In the update dialog, mark a control Pending Review, In Progress, Implemented, or Not Applicable.
  • Assign an owner. Assign Owner puts a team member on the control.
  • Mark not applicable. Toggle Not Applicable and note why it doesn’t apply.
  • Add evidence. Notes, a file, or a link, on the control itself. See Evidence & audits.
Findings summarize gaps for a control. You can regenerate findings across a framework’s controls with Regenerate findings and review them in each control’s detail.

Coverage and reporting

On Org Controls, each framework shows:
  • Controls in scope
  • Coverage (percentage implemented)
  • Implemented controls
  • Missing controls
Coverage is calculated on in-scope controls only. Use Download Report on a framework to export a maturity report.
Use the Filter options to focus on controls by status, owner, or applicability.

Next steps

Evidence & audits

Attach evidence to controls and manage audits and certifications.

Working with a use case

Generate an architecture and track control progress inside the workspace.