BY NEURABYTE
FRAMEWORKS/OTHER/INTERNAL CONTROL SETS
BYO
OTHER · Your organization

Internal control sets

Bring your own controls. Map them the same way.

Most large organizations already have an internal control framework: a policy library, a risk register, and control IDs that auditors recognize. Because Lore frameworks are versioned crosswalk files, you can map your own controls onto the 15-control registry and get the same live evidence view and signed bundles as any published framework.

AT A GLANCE
ISSUERYour organization REGIONEnterprise tier CATEGORYOther CROSSWALKVersioned mapping onto the 15-control registry
EVIDENCE, NOT CERTIFICATION
01. WHO IT APPLIES TO

Is this one yours?

01Enterprises with an internal control framework or unified control set
02GRC teams consolidating multiple regulatory obligations
03Organizations with contractual controls from key customers
02. KEY REQUIREMENTS

The parts of Internal control sets that touch what agents do.

Control identifiers
Each internal control has a stable ID, owner, and description.
Mapping
Internal controls are mapped to Lore controls where enforcement evidence exists.
Versioning
Crosswalks are versioned so past audits remain reproducible after the control set changes.
Gap marking
Controls with no Lore evidence are marked out of scope, not inferred.
03. HOW LORE MAPS TO IT

Enforcement controls, read against the requirement.

These controls exist because the platform needs them to run safely. The crosswalk reads their signed evidence against Internal control sets. Where there is no evidence, the report says gap.

LORE CONTROL INTERNAL CONTROL SETS REFERENCE
Blocking authorization gateYour access and privilege controls
Maker–checker approvalYour change and approval controls
Signed, hash-chained receiptsYour logging and integrity controls
Provable deletionYour retention and disposal controls
Illustrative references. The shipped crosswalk carries exact clause citations, its version, and the review date.
04. OUT OF SCOPE

What Lore will not claim.

Controls that are organizational or physical are yours to evidence elsewhere.
The crosswalk format is documented; the mapping work is done with our team or by yours.
05. QUESTIONS
What format is a crosswalk?
A versioned JSON document listing your control IDs, the Lore controls they map to, and notes. Reviewed and signed like any other framework file.
Can we export to our GRC tool?
Yes. Evidence bundles and mappings export in machine-readable form.
Is this included?
Enterprise tier.
← PREVIOUSeIDAS ALL FRAMEWORKS NEXT →SOC 2
INTERNAL CONTROL SETS · EARLY ACCESSEVIDENCE COLLECTED ONCE

Start building the record your auditor will read.

Every receipt Lore signs today is evidence for Internal control sets tomorrow. Turn the crosswalk on when you are ready; nothing needs re-collecting.

Also from Neurabyte: Cupel
Lore's core mechanisms are patent-pending. Product names are trademarks of their respective owners; listing an integration doesn't imply a partnership.
© 2026 NEURABYTE INC.