Define the Scope of Your Compliance Audit
Set controls out of scope to exclude them from your compliance score and from generated reports.
If a control in a framework isn't part of your audit, set it out of scope. Mondoo excludes out-of-scope controls from your compliance score and hides them from generated reports.
Every control is in scope by default. Scope changes apply per space; setting a control out of scope in one space doesn't affect other spaces.
Setting a control out of scope hides it from your reports entirely. If you want to exclude a control from your score but still show it to your auditor with a justification, set an exception instead.
Set a control out of scope
-
From a space, select Compliance in the side navigation, then select the framework.
-
Scroll to the list of controls. Check the box beside the control.
-
Select SET OUT OF SCOPE.
The control is immediately removed from the compliance score and from new reports generated for this space.
Restore a control to scope
-
Open the framework and scroll to the controls list.
-
Check the box beside the out-of-scope control.
-
Select SET IN SCOPE. The control returns to the score and to reports for this space.