Knowledge Base

Overview

The Compliance Controls Knowledge Base is the central repository for your organization's DataBee compliance control documentation. It provides a structured way to manage controls, map them to industry frameworks (like NIST CSF, PCI-DSS, or CIS), and track the evidence and metrics required for successful audits.

This feature allows compliance officers and control owners to:
- Centralize Documentation: Keep all control descriptions, owners, and guidance in one place.
- Track Performance: Define target benchmarks and metrics.
- Map to Frameworks: See exactly which controls satisfy specific regulatory requirements.
- Export Artifacts: Generate auditor-ready PDF documentation with a single click.

Getting Started

To access the Knowledge Base, navigate to Dashboards > Knowledge Base > Control Documentation in the sidebar or go directly to:
/control-dashboards/documentation

1. Control Listing & Search

The main page displays a comprehensive list of all controls you are entitled to view.

Key Features:

• Search Bar: Quickly find controls by typing their name, ID, or keywords in the search box at the top of the table.

• Sortable Columns: Allows users to sort data in ascending or descending order.

• Dashboard: The name of the control or associated dashboard.

• Summary: A brief overview of the control's purpose.

• Owner: The individual or team responsible for the control.

• Last Updated: The timestamp of the last modification.

• Instant Access: Click on any dashboard name to view its full details.

• Quick Download: Use the download icon in the "Action" column to immediately export a PDF for that specific control.

2. Control Detail View

Each control has a dedicated page providing a "360-degree view" of its implementation.

Detail Sections:

• Hero Section: Displays the primary title and summary.

• Key Metrics Strip: A high-level ribbon showing the Owner, Target Benchmark (e.g., ">= 95%"), and Last Updated date.

• About This Control: Detailed implementation guidance and the specific purpose of the control.

• Why It Matters: Explains the business value and the specific risks (e.g., "Shadow IT", "Unmanaged assets") addressed by this control.

• Control Definition: Technical details, including links to internal policies and support information.

• Status & Compliance: Breakdown of the target metric, including the Numerator (what is being measured) and Denominator (the baseline).

• Related Resources: Links to associated dashboards, evidence tables, or external documentation.

• Sidebar (Quick Reference):

• Communications: Teams channels and email distribution lists for the owners.

• Escalation: Direct contacts and office hours for escalation paths.

• Data Sources: The technical systems feeding data into this control (e.g., "CrowdStrike", "AWS Config").

• Framework References: Direct mappings to standards like NIST CSF v2.0 or PCI-DSS v4.0.

3. Managing & Editing Controls

Authorized users can customize control documentation directly from the browser.

How to Edit:

1. Navigate to a control's detail page.

2. Click the Edit button on any card or section.

3. A dialog will appear allowing you to modify fields like summaries, target values, owners, or guidance.

4. Click Save to apply changes. Modifications are tracked and the ‘Last Updated’ timestamp will update automatically.

Resetting Changes:

If you need to revert a control to its original pre-seeded state, click the Reset to Defaults button in the top header.

Note:

This will permanently remove all custom overrides for that control.

4. Exporting for Audit (Audit Readiness)

Auditors often require point-in-time snapshots of control documentation to prove governance.

• PDF Export: On any control detail page, click the Download button. This generates a professionally formatted PDF document containing:

• Ownership and Escalation info.

• KPI definitions and targets.

• Evidence references and data source lineage.

• Framework mapping.

Note:

PDF timestamps are displayed in the timezone configured in your user profile, not UTC.

5. Common Use Cases

For Compliance Analysts

• Interpret Evidence: Click through to CCM dashboards to see live compliance data.

• Support Audits: Export PDF artifacts for controls during audit cycles.

6. Creating Custom Control Documentation

In addition to the built-in controls, you can create standalone control documentation that is not tied to a specific DataBee dashboard. This is useful for internal policies, vendor assessments, or controls that your organization manages outside of the standard DataBee compliance views.

How to Create:

1. Navigate to the Knowledge Base page (/control-dashboards/documentation).

2. Click the Create New Document in the top-right of the page.

   

3. Enter a title for the new control documentation. DataBee will apply a generic template as the starting point.

   

4. Edit the newly created control to fill in ownership, benchmark targets, framework references, and guidance as needed.

Note:

Custom control documentation entries are not connected to a DataBee dashboard and will not display live compliance metrics. They serve as a documentation record only.

7. Deleting Control Documentation

Custom (non-built-in) control documentation can be removed when it is no longer needed.

How to Delete:

1. Navigate to the Knowledge Base page.

2. Locate the control you wish to remove. Only documentation that you created (not built-in DataBee controls) will show a delete option.

3. Use the delete option available in the listing or on the control's detail page.

Note:

Built-in (out-of-the-box) DataBee controls cannot be deleted. Only custom documentation entries created by your organization are eligible for deletion.