Control Sets#

Control sets are collections of compliance controls extracted from documents. They form the foundation of all mapping and assessment workflows in Qudit.

Document Types#

TypeDescriptionExample
InternalYour organization’s policies and proceduresInformation Security Policy
ExternalRegulatory frameworks and standardsISO 27001, NIST CSF, SOC 2
ImplementationAuto-generated from approved assessmentsEvidence documents

Uploading Documents#

PDF Upload#

  1. Navigate to DocumentsUpload
  2. Select PDF as the file type
  3. Provide a title and optional description
  4. Mark as Internal or External
  5. Upload the file

Qudit uses AI to automatically:

  • Extract individual controls from the document
  • Identify control IDs and descriptions
  • Categorize controls by topic
PDF extraction works best with well-structured documents. Tables and numbered lists are extracted most accurately.

Excel Upload#

For more control over the extraction:

  1. Select Excel as the file type
  2. Upload your spreadsheet
  3. Map columns:
    • ID Column — The column containing control identifiers
    • Text Columns — One or more columns with control descriptions (will be concatenated)

Managing Controls#

Viewing Controls#

Click on any document to view its controls. Each control shows:

  • Control ID
  • Control text
  • Topic assignments (if available)

Editing Controls#

You can edit individual controls:

  • Update the control text
  • Change the control ID
  • Add or remove topic tags

Adding Custom Controls#

To add a control that wasn’t extracted:

  1. Open the document
  2. Click Add Control
  3. Enter the control ID and text

Sharing Documents#

Documents can be shared with other users in your organization:

  1. Open the document
  2. Click the Share button
  3. Select users to share with

Shared users can view and use the document in mappings, but cannot edit or delete it.

Document Status#

StatusMeaning
ProcessingDocument is being parsed (PDF only)
CompletedReady to use
FailedExtraction failed — try re-uploading
Processing typically takes 1-2 minutes depending on document length.