Principles
For a given policy, it is possible to have different views, "classifications", of the controls composing it. It's about bringing these controls together into a set of different groups.
Most policies have only one classification and this distinction is not apparent. You can nevertheless observe this on certain standards such as ISO 27002 - 2022.
Adding a classification to your policy can allow you to order your controls differently, display only a portion of the controls relative to your primary classification, etc.
In addition, during an evaluation campaign, you can configure your campaign in relation to a certain classification of a policy.
Finally, within a dashboard you can report on a particular classification of your policy.
💡A policy's overall compliance score always takes into account all applicable controls (based on their priority) and is independent of classifications.
Adding a classification: in practice
From the toothed wheel ⚙️ > Catalog > Your private policy: click on the 3 small dots at the top left > Add a classification
Name the classification
You can then add the controls and groups of controls you want in Tenacy directly or by import/export.
Do not hesitate to consult this article to understand how to do it.
As soon as there are at least two classifications for a policy, a selector appears at the top left of the page, allowing you to move from one classification to another:
When there is only one classification (the default display), this selector does not appear.
If not all policy controls are present in a classification, a warning icon will alert you to partial vision.
To modify the name and/or identifier of a classification, select the classification in the selector then click on "Edit classification" in the extended menu.
From this menu, you can also delete the classification or make it the default classification. This means that the classification will be displayed by default from the policy in score mode and first from the policy in edit mode.