Skip to content

Control plan

The Control Plan is the review surface for your recurring operational work: a grid where each row is a recurring task definition and each cell is one occurrence, colour-coded by status and laid out across time. A quarter’s worth of weekly access reviews or monthly backup tests reads as one strip — it answers, at a glance, “are we actually running our recurring controls on cadence?”

Operations → Control Plan in the sidebar.

  • Columns are time periods — monthly (the default) or weekly, chosen from the granularity dropdown. The header shows the selected start-to-end range.
  • Rows are recurring task definitions.
  • Cells are occurrences, coloured by status:
StatusCell colour
CompletedGreen
In progressViolet
PendingRed
CancelledGray
No occurrence in this periodDashed white

A healthy control programme is a wall of green with the occasional violet at the leading edge. A row that alternates green and red is a cadence problem; a row that goes red and stays red is an ownership problem. Click any cell to jump into the corresponding task occurrence and see who was assigned and what evidence was attached.

The collapsible filter panel above the grid takes:

  • Start period / end period — month inputs; the default range is the current year.
  • Granularity — monthly or weekly.
  • Domain — narrow to a single domain.
  • Assigned to — by assignee.
  • Applied controls — only occurrences that maintain a specific control.
  • Status — filter the rendering by completion state.

The filter button shows an active-filter count badge so you always know which view you’re on, and Reset clears everything and snaps the period back to the current calendar year.

A compact mode toggle in the header collapses row detail to fit more definitions on screen — useful once you have dozens of recurring tasks.

The grid is built for the recurring “did we do the work?” conversation:

  1. Filter to the domain or control under review.
  2. Scan the strip for red cells — pending occurrences that should have been completed.
  3. Click through each red cell, decide whether to complete, reschedule or reassign it.
  4. For audits, filter by the applied control in question: the strip of green cells with evidence attached is the proof of operating effectiveness.
  • Tasks — the definition/occurrence model this page rolls up.
  • Applied controls — the controls the recurring work maintains.
  • Calendar — the same deadlines in day-by-day form.