InfoPol Logoinfopol
Sign In

Attaching Automations to Controls

Learn how to link automation workflows to controls and other entities

Attaching Automations to Controls

Automations become powerful when attached to the specific controls, registries, or other entities they're designed to monitor. This guide explains how to attach automations and when to use each method.

Why Attach Automations?

Attaching an automation to a control means:

  • Tasks created by the automation are automatically linked to that control
  • You can see automation health directly on the control
  • Tasks appear in the control's evidence table
  • The automation shows up when viewing the control details

This creates a clear connection: "This control needs monthly review" → Automation creates monthly review tasks → Tasks are linked to the control

Three Ways to Attach Automations

Method 1: From the Control Status Button (Quick Attach)

This is the fastest way to attach an automation when you're working through controls in your workspace.

When to use: You're fulfilling controls and want to quickly set up a recurring review

Step-by-Step:

  1. Navigate to Workspace

    • Go to your account workspace
    • You'll see your list of controls

  2. Find the Control

    • Locate the control that needs automation
    • Look at the "Status" column

  3. Click the Status Button

    • Click the button in the Status column (often shows current status or "Fulfill with...")
    • A 3-tab dialogue opens

  4. Understanding the 3-Tab Dialogue

    Tab 1 - Document:

    • Upload or link documents as evidence for this control
    • Use when: You have documentation to attach (policies, procedures, screenshots)

    Tab 2 - Task:

    • Create a one-time manual task for this control
    • Use when: You need immediate action on a specific item

    Tab 3 - Automation:

    • Attach an automation workflow to create recurring tasks
    • Use when: This control needs regular, ongoing review or maintenance

  5. Select the Automation Tab

    • Click "Automation" (third tab)
    • You'll see a list of available automation workflows

  6. Choose Automation(s)

    • Browse available automations
    • Each shows: name, description, and recurrence schedule
    • Select one or more automations that fit this control's needs
    • You can attach multiple automations if the control needs different types of review

  7. Attach

    • Click "Attach" or "Save"
    • The automation is now linked to this control
    • Future tasks will automatically reference this control

Tip: You can attach the same automation to multiple controls if they need the same review schedule.

Method 2: From Control Detail View

Use this when you're reviewing a specific control and want to add or modify automations.

When to use: You're viewing a control and want to see or change its automations

Step-by-Step:

  1. Open Control Detail

    • Go to Workspace → Controls
    • Click on a specific control to view details

  2. Locate Automation Section

    • Scroll to the "Linked Items & Evidence" section
    • You'll see tabs for different evidence types

  3. View Attached Automations

    • Look for existing automations in the evidence table
    • They appear with a clock icon and show health status

  4. Add New Automation

    • Click "Attach Automation" button
    • Select from available automations
    • Click "Attach"

  5. Edit Existing Automation

    • Click on the automation name in the evidence table
    • This opens the automation settings
    • Make changes and save

Tip: The control detail view is great for seeing all automations attached to a control in one place.

Method 3: From Settings Page

Use this when creating or editing an automation and want to specify its target entity.

When to use: You're setting up a new automation and know which control it should attach to

Step-by-Step:

  1. Navigate to Settings

    • Click your account name → Settings
    • Go to the "Automations" tab

  2. Create or Edit Automation

    • Either create a new automation or click "Edit" on an existing one

  3. Set Target Entity

    • In the automation form, find the "Target Entity" section
    • Select entity type: Control, Registry, Risk, Asset, Vendor, or Incident
    • Choose the specific entity from the dropdown

  4. Save

    • Click "Save"
    • The automation is now attached to that entity

Tip: You can change the target entity later by editing the automation.

Automation vs. Task vs. Document

Understanding when to use each tab in the 3-tab dialogue:

Use the Automation Tab When:

  • The control needs regular, recurring attention
  • The review happens on a predictable schedule (weekly, monthly, quarterly)
  • You want to ensure the activity never gets forgotten
  • You need to track completion rates over time

Examples:

  • Monthly access control list review
  • Quarterly vulnerability scan review
  • Annual policy review

Use the Task Tab When:

  • You need immediate, one-time action
  • The work is specific to current circumstances
  • The task doesn't recur regularly
  • You need to assign specific work to someone now

Examples:

  • Implement MFA for new application
  • Update firewall rules for new server
  • Complete corrective action from audit finding

Use the Document Tab When:

  • You're providing evidence of control implementation
  • You need to upload policies, procedures, or screenshots
  • You're linking existing documentation

Examples:

  • Upload the password policy document
  • Link to the access control procedure
  • Attach screenshot of security settings

Tip: You can use multiple tabs! For example, upload a policy document (Tab 1), create a task to review it (Tab 2), and attach an automation for future reviews (Tab 3).

Managing Multiple Automations on One Control

Some controls may need multiple automations for different purposes.

Example: Access Control Management:

  • Weekly Automation: Review new user accounts
  • Monthly Automation: Review all active access rights
  • Quarterly Automation: Complete access recertification
  • Annual Automation: Update access control policy

This is perfectly fine! Each automation serves a different purpose and creates tasks on its own schedule.

Viewing Attached Automations

To see which automations are attached to a control:

  1. From Workspace

    • Look at the control row
    • Automations appear in the evidence/links column with a clock icon

  2. From Control Detail

    • Open the control
    • Check the "Linked Items & Evidence" section
    • Automations appear in the table with health status

  3. From Settings

    • Go to Settings → Automations
    • Each automation shows its target entity in the list

Detaching or Changing Automations

To Detach an Automation:

  1. Method A: From Control Detail

    • Open the control detail view
    • Find the automation in the evidence table
    • Click the delete/remove icon
    • Confirm removal

  2. Method B: Edit the Automation

    • Go to Settings → Automations
    • Click "Edit" on the automation
    • Clear the target entity field
    • Save

Note: Detaching an automation doesn't delete existing tasks - they remain linked to the control. Only future tasks won't be created.

To Change Which Control an Automation Targets:

  1. Go to Settings → Automations
  2. Click "Edit" on the automation
  3. Change the target entity to a different control
  4. Save

Tip: If you want the automation on multiple controls, create separate automation instances (or attach the same automation to each).

Best Practices

Start Simple

Begin with one automation per control - add more as you understand your needs.

Match Automation to Control Risk

  • High-risk controls: More frequent automation (weekly/monthly)
  • Medium-risk controls: Regular automation (monthly/quarterly)
  • Low-risk controls: Less frequent automation (quarterly/annual)

Use Consistent Schedules

If multiple controls need the same review type, use the same automation schedule for efficiency.

Monitor Health

After attaching, check automation health regularly to ensure tasks are being completed.

Document the "Why"

In the automation description, note why this specific control needs this automation frequency.

Common Scenarios

Scenario 1: New Control Implementation

You're implementing a new control for password complexity.

Steps:

  1. Create the control
  2. Use Tab 1 (Document) to upload the password policy
  3. Use Tab 2 (Task) to create "Implement password complexity requirements"
  4. Use Tab 3 (Automation) to attach "Monthly Password Policy Review" automation

Scenario 2: Existing Control Needs Regular Review

You have an established access control that needs recurring review.

Steps:

  1. Open the control detail view
  2. Click "Attach Automation"
  3. Select "Monthly Access Review" automation
  4. Save

Scenario 3: Changing Review Frequency

Your quarterly risk assessment needs to become monthly.

Steps:

  1. Go to Settings → Automations
  2. Find the risk assessment automation
  3. Edit the recurrence rule from quarterly to monthly
  4. Save (all attached entities automatically get the new schedule)

Next Steps