Features

Get equipped for the compliance journey

Everything you need to blaze a trail for your MSP or lead the way for your clients.

Read ScalePad Lifecycle Manager reviews on G2

Start strong with tools for efficiency and growth

Get a jumpstart by letting ControlMap gather and organize compliance data.

Cross-mapped frameworks

Why do double, triple, or 25x the work when automation makes it easy? Let ControlMap apply matching evidence to multiple top frameworks:

SOC 2
ISO 27001
NIST CSF

Integrations

Collect evidence and keep it updated without manual checks. Automatically gather and sort the details you need from 40+ integrations including:

Amazon Web Services (AWS)
Microsoft 365
Google Workspace, Cloud, and Drive
Salesforce

Common assessments

Get to know your clients’ compliance status with this Q&A assessment. You’ll get a single view (and report) to see the status of several key frameworks, including:

ISO-27001 (2018)
NIST CSF
CMMC 2.0
CIS Controls v8
HIPAA

Ready-to-use documents and templates

Skip starting from scratch. Access 50+ pre-made policies, procedures, and governance documents. What sort of policies?

Onboarding and offboarding checklists
Laptop and endpoint compliance
Track MFA for high-risk systems
Vulnerability management policy

Policy management

Policies are the bedrock of all certifications, audits and assessments. Manage them all with ControlMap.

Map policies to security controls and framework requirements
Save hours of work with preloaded templates
Consolidate documentation, reviews, approvals, and acknowledgement tracking
Maintain audit-ready policies with automation
Export multiple policies in a single document

Evidence management

Start with a predefined evidence library ensuring, evidence is assigned, current, and linked to compliance objectives.

Organized by ID number and title

Color-coded status for quick review
Due dates and completion dates
Know and understand if:
- Backups are enabled
- MFA is enabled
- Data is encrypted
- Who has access

Risk management

Use the ready-made risk register to identify risks and score them based on the likelihood of impact on you or your clients’ business.

Identify custom risks
Create a mitigation plan
Turn the risk register into a report
Continually updates automatically
Links to security controls

Vendor management

Passing vendor management requirements is a breeze when everything is organized in ControlMap.

Pre-built vendor assessment questionnaire
Populates with data from integrations
Assign risk scores to vendors
Shows compliance status of vendors
Organizes documents and vendor links

Stay organized while managing every detail

Every datapoint, control, document, and risk has its place in ControlMap.

Share your compliance status

Control the flow of information internally, to auditors, vendors, or other stakeholders.

MSP Portal

See customers, policies, procedures, and governance for each client within a single pane of glass. Take your vCISO services to the next level with:

A centralized repository of all clients’ security posture and data
Branding functions, so clients have a seamless experience

Reports

Stakeholders asking for documentation? Export key information as a Word or PDF document.

Plan of Action and Milestones (POA&M)
Assessment Report
Objectives Report
Applicability Report
Supplier Score Report (SPRS)
System Security Plan (SSP)

Employee Portal

All employees are involved in achieving compliance. Streamline their actions by using the employee portal to:

Assign mandatory policies
Gather acknowledgements
Sends out reminders for pending tasks
Maintains updated policies for review

Trust Portal

Get a dynamic, real-time view of the security compliance posture of your MSP business or your clients’ business. Maintain access to the portal as it’s shared with customers, prospects, and vendors.

Status of policies and procedures
Build custom reports
Security controls
Security documents and hyperlinks

Ready to see all this in action?

Watch a short demo of ControlMap, or book a 1:1 demo with a compliance expert.

Get a Demo