Informational Fresh portal_guide: FN-103
The AI Tutor will answer grounded in this lesson's cited source (portal_guide: FN-103) and key concepts — authority Informational. Not yet enabled.
Governance
The operating rhythm of governance: your controls and policies, applied to your estate, driven by a work queue so reviews actually happen.
What you see
| Element | What it means |
|---|---|
| Controls | The control set applied to your systems — drawn from the platform's control catalogue, tailored to your frameworks. |
| Policies | Your governing policy records, versioned. |
| Work queue | What needs doing now: reviews due, evidence requested, exceptions to clear. Working the queue is doing governance. |
| Exceptions | Where a control can't be met yet — recorded honestly with an owner and a date, not hidden. |
What you do here
- Work the queue top-down — it is ordered by what matters.
- Attach evidence as you complete controls (it lands in Evidence automatically).
- Record exceptions rather than silences — an owned exception is governance; a silence is a finding.
Inputs and outputs
You put in control implementations and review decisions; you get out posture (Risk section), evidence (Evidence section) and a defensible record (Decision Centre).