Control Centre: Completing Assessments, Approvals & Monitoring

Keywords: Control Centre, control assessment, evidence, evidence recommendations, rationale, comment, approval, reject, monitoring, control history, BoardX, admin

Once a Control is in Assessment, Approval, or Monitoring, the Tasks tab in the right-side panel is where the real work happens — answering whether the Control is implemented, attaching evidence, leaving comments, approving or rejecting the result, and (later) reviewing what was done in past cycles.

In the Controls list, click any card — the right-side panel slides in. If the Control is in Assessment, Approval, or Monitoring, the panel opens straight to the Tasks tab. (For Drafts, Paused, or Retired Controls, the Tasks tab isn't available.)

What you see on the Tasks tab depends on the Control's current status. The next steps walk through each one.

When the Control is in Assessment status, you'll record whether the Control is in place.

Start by answering Is this Control implemented? — the options are Yes, No, or Not applicable. Your answer drives what's required next:

If the Complete Assessment button at the bottom is greyed out, hover over it for a tooltip that tells you exactly what's missing.

Evidence is what you use to back up your answer.

Click + Add Evidence to open the Add Document modal. From there you have three ways to attach a document.

Upload a file lets you drag a PDF, Word, or Excel file from your computer. You can drop multiple files at once.

Select from the Document Centre lets you pick a document already stored in your Document Centre.

Select from the Policies & Contracts workspace lets you pick a published P&C document. The latest published version is what gets linked.

Once a document is attached, you'll see a tile with the file name, the date and person who added it, and a 3-dot menu for replacing, downloading, or deleting it. (You can't delete the last remaining piece of evidence — replace it instead.)

The Previous Evidence button next to + Add Evidence opens a modal listing every document attached as evidence to this Control in earlier cycles. You can preview a document, download it, and reuse it as evidence in the current cycle. If there are no previous cycles, the modal explains "There are no Cycles launched."

Below the Evidence section sits Evidence Recommendations — documents the system suggests are likely to satisfy this Control. Because they're meant to support the assessment, they're built right into the assessment flow. Click the section's grey background to expand it.

Each recommendation is a row with:

To use one or more recommendations as evidence on this assessment, tick their checkboxes and click Add as Evidence. Recommendations without an attached document can't be added — the checkbox is disabled until you give the recommendation a document, with a tooltip explaining why.

Click + Add Rationale/Comment to open the rationale modal. Type into the rich-text field (5,000 character limit) and save. Each comment is stored with your name and the date.

You can add more than one comment, and any comment can be deleted later — the changes sync back to the underlying control assessment task.

Once the required fields are filled in, the Complete Assessment button at the bottom of the panel becomes active. Click it to submit.

Behind the scenes, your Yes / No / Not applicable answer is recorded on the Control assessment task, the task is marked complete, and the Control moves to either Approval (if approval is required) or Monitoring (if it isn't).

The Control disappears from the Assessment tab, and you'll see a success pop-up: "Status is successfully updated."

When a Control reaches Approval status, the assigned approver opens it the same way — through the Tasks tab — and decides whether to approve or reject the assessment.

The approver can review the answer to Is this Control implemented?, the attached evidence, and any rationale or comments. They can also add evidence or comments of their own.

Under Approve Assessment, the options are:

Approve. Click Complete Approval. The Control moves to Monitoring.

Reject. Click Complete Approval, and a Rejection Note modal appears.

The approver can leave an optional note (up to 500 characters) explaining what's wrong, then click Complete rejection.

The Control goes back to the original assignee, who receives an email letting them know the assessment was rejected and that they need to redo it.

After an assessment is completed (and approved, if needed), the Control moves to Monitoring. Opening it in Control Centre still shows the Tasks tab, but it's now read-only for the cycle that just finished.

Colour-coded labels show what was answered: green for Yes / Approve, red for No / Reject, and blue for Not applicable. You can view, download, or delete the attached evidence and comments from this view (you can't delete the last piece of evidence — that's protected).

You can still add a new evidence document or rationale to the cycle if something changes between cycles — use the New Evidence or Add Rationale/Comment buttons.

Past cycles live in the Control History section, which is on the Details tab of the right-side panel (not the Tasks tab). Scroll to the bottom of the Details tab to find it.

Each cycle is a card you can expand. The collapsed view shows the cycle number and the Control's state at the time. A rationale/comment icon appears if any rationale or comment was added during that cycle — click it to open the Control Assessment Rationale/Comments modal showing each comment with author, date, and text. An evidence icon appears if any evidence was added — click it to open the Control Assessment Evidence modal listing every document attached during that cycle, with a download button for each.

Expand a card to see more details: the owner, evidence start/expiry date (for event-based Controls), assessment start date, assessment completion date, and approval completion date (if relevant).

To export the history, click Export at the top of the section, then choose .pdf or .xlsx. The file is named after the Control number and the date — for example, CTR5930 Control_History - 06.May.2026.pdf.

If the Control hasn't run a cycle yet, the section still appears but with the note "There are no Cycles launched." You can still export it in that empty state.

If you get stuck, click the chat bubble in the bottom-right corner of any Control Centre page.