Account menu and settings

About

The account menu is where you manage your own settings and your company's settings. It is at the top left of ControlMap, under the company logo and name. From it you can open Account Settings, open My Profile, change how ControlMap looks, and sign out.

Account Settings is where a Super Admin looks after company details, users, teams, document wording, risk scoring and vendor assessment setup. My Profile and Appearance are for every user.

Open the account menu

Select the company logo and name at the top left. The menu has these sections, from top to bottom. A section is hidden when it doesn't apply to you:

Tenant: a client switcher for MSP partner users who are Super Admin or Compliance Manager. Picking a client reloads ControlMap for that client.
Account: Account Settings.
Product: ControlMap, with a submenu called Your Products that lists ControlMap and ScalePad Community. ScalePad Community opens in a new tab. This section is shown to MSP partner users and to Contributors, Auditors and Compliance Portal Users, and not to a client Super Admin.
User: your name and avatar, then My Profile, Appearance and Sign Out. MSP partner users also see My Compliance and Connect to JIRA.

The account menu open at the top left of ControlMap, showing the Tenant, Account, Product and User sections

Sign Out ends your session. If you sign in with single sign-on, you are also signed out of your identity provider.

Switch between light and dark

You can choose how ControlMap looks:

Select the company name at the top left.
Select Appearance.
Select System default, Light or Dark. A tick shows the one that is on.

The Appearance submenu with System default, Light and Dark, and a tick beside Light

Your choice is saved to your account, so it follows you to other browsers. The sun and moon button in the top bar does the same in one click.

Open Account Settings

Account Settings is shown to Super Admins, and to MSP partner users who are Super Admin or Compliance Manager. To open it:

Select the company name at the top left.
Select Account Settings. The settings menu appears on the left and Org Details opens.
Select another page from the left menu.
To leave, select Back to app at the top of the left menu. It takes you back to the dashboard.

The left menu is grouped like this:

Systems Information: Org Details, System Overview
Account: Users, Teams, Departments
Assessment: Common Assessment
Documents: Document Content, Variables, Header & Footer
Risk: Risk Factors, Risk Score
Vendors: Questionnaire, Email Templates, Vendor Tiers
Manage: Activity, AI usage. Only Super Admins see these two.

Update your company details and logo

Select the company name at the top left, then Account Settings. Org Details opens.
Change the details you need. The page, called Organization details, has these fields:
- Name, Industry and Number of Employees are required.
- Address, Phone, Client Website (Optional) and Description are for your company's contact and background details.
- URI is your company's short web name, shown before .app.ctrlmap.com.
To add or replace your logo, select Upload logo (or Change logo if you already have one) and choose a PNG, JPG, JPEG, JFIF or BMP image.
Select Save. A message confirms "Successfully updated your company information."

The Organization details page in Account Settings with the company fields, URI and logo

If you change the URI, ControlMap asks you to confirm and warns that bookmarked links stop working. When you confirm, a message says your organization URL has been updated and offers Go to new login.

Manage teams

Use Teams to create groups of people and manage their members. To open it, select Account Settings › Teams.

The Teams page with a search box, a button to add a team and a table of teams

The page shows how many teams you have, a search box, and a table with the columns Name, Members and Actions. To work with teams:

To find a team, type in the search box.
To create a team, select the Team button with the plus sign at the top right.
To change a team, select its name. The Edit team panel opens with the Team name field, an Update name button, and the Team Members list with a search box.

Set up your risk score

The Risk Score page sets the likelihood and impact scores used to rate risks, and the risk level each combination gives. To open it, select Account Settings › Risk Score.

The Risk Score page showing the Risk Score Matrix with likelihood across the top and impact down the side

The Risk Score Matrix shows likelihood across the top and impact down the side. Each cell combines one likelihood score and one impact score to give a risk level of Low, Medium, High or Severe. To change it:

To rename or renumber a score, select its label. The Edit likelihood score or Edit impact score panel opens.
To change the risk level for a combination, select that cell. The Edit risk level and color panel opens.
To turn a score off or on, use the Enabled switch under its label.

At least two likelihood scores and two impact scores must stay enabled.

Other Account Settings pages

These pages are also in the Account Settings left menu:

System Overview: capture key information about the information system under assessment. It is needed for CMMC 2.0 and FedRAMP reports such as the System Security Plan. The fields are Name, ID, Type, Scope, Operational Status, Environment of Operation, Impact on Confidentiality, Impact on Integrity and Impact on Availability. Each field saves when you leave it, so there is no Save button.
Users: manage the people in your company. See the article "Users and roles". The sign-in and multi-factor authentication settings for your company are also on this page. See "Sign-in settings and single sign-on" and "Multi-factor authentication".
Departments: select Create Department to add one, and select a row to edit it in the Edit department panel. ControlMap refuses a name that already exists.
Common Assessment: turn the common assessment off or start it again. To turn it off, type yes proceed. Once it is off, select Start Assessment to set up all common questions and mappings again. Action items are kept either way.
Document Content: add cover page and last page content for policies, procedures and governance documents. Turn on Enable pre content or Enable post content, enter your text, and select that section's Save. The text appears in previews and downloads.
Variables: the list of organizational parameters, the same list as in Documents › Organizational Parameters.
Header & Footer: add header and footer text for each page of policies, procedures, governance documents and exported reports. Turn on Enable page header or Enable page footer, enter your text, and select Save.
Risk Factors: add, remove or change the loss factors used by the Risks module. Select Add Risk Factor to create one. Each loss factor is a row you can expand to see a description for each level.
Questionnaire: add or remove vendor assessment questionnaires. Select Create questionnaire to start one. Each questionnaire holds questions, which you add with Add question, and you can import questions.
Email Templates: set up the emails sent during vendor risk assessments. It has three tabs: Sender emails, Risk Assessment (the email subject, the email body and the contact person for queries) and Reminders. On Reminders, Reminder frequency is Daily or Weekly and applies to all future vendor assessment reminder emails.
Vendor Tiers: customize the vendor tiers. Keep at least three tiers enabled and order them from most to least critical. You can move a tier up or down, edit it, or disable it. Disabled tiers sit under Available Tier Slots.
Activity (Super Admin only): the history of changes in your company, grouped by month. Use the Entity filter to narrow it. It shows All activity by default.
AI usage (Super Admin only): review the AI credits used by each user during the current usage period.

Update your profile

Every user has a My Profile page. To open it, select the company name at the top left, then My Profile. What you see depends on your role.

These cards are shown to everyone:

Personal Details: your Email, which you can't change, plus Full Name and Job Title. Select Update to save.
Two-Factor (MFA) Authentication: shows whether you are Enrolled or Not Enrolled, and has a My 2FA Settings button. See the article "Multi-factor authentication".

These cards are shown to Super Admins, Compliance Managers and Compliance Portal Users:

Connect to Slack and Notification Channels: select Connect to Slack to link your Slack account. Once connected, the button changes to Reconnect, and Disconnect is also available. Under Notification Channels, tick Email, Slack or both, then select Update Settings. If you turn every channel off, ControlMap asks you to confirm that you won't be notified of any alerts.
My SignIn Preferences: shown only when your company has turned on another sign-in method. Choose your method from the SignIn Preferences dropdown and select Update Preferences. You are signed out so you can sign in the new way. See "Sign-in settings and single sign-on".

These cards are shown to Super Admins and Compliance Managers:

Notification Preferences: choose when you are notified. The options are Notify me of all activity (* Only for compliance managers), Notify me only when I am added as a watcher, Notify me only when I am an owner and Notify me only when I am assigned. Choosing all activity ticks the other three and locks them. Select Update Settings to save.
My Reminders Settings: turn on your own Weekly Reminders email for Policy, Evidence or both, then select Update Settings. This is a reminder email about your own work that is coming due.