{"type":"video","version":"1.0","html":"<iframe src=\"https://www.loom.com/embed/a0b9524e4e464a7b84f5fdd56d5bbf89\" frameborder=\"0\" width=\"1920\" height=\"1440\" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>","height":1440,"width":1920,"provider_name":"Loom","provider_url":"https://www.loom.com","thumbnail_height":1440,"thumbnail_width":1920,"thumbnail_url":"https://cdn.loom.com/sessions/thumbnails/a0b9524e4e464a7b84f5fdd56d5bbf89-3984d4877a5c3562.gif","duration":168.008,"title":"Start your audits with controls first","description":"This Loom introduces a new controls update that lets customers add and scope controls to an IRL audit before uploading anything. Nidhi explains that in a SOC 2 Type 2 audit with no request list or controls uploaded, users can add, remove, and later link controls once request lists are available. The video also notes that mapping can be done later after IRL upload, including mapping framework codes to requests and control IDs to control requests. After uploading an IRL, the existing request-to-control mappings populate the controls list, and users can then adjust unlink or add controls as needed."}