--- title: Understanding Controls, Checks and Tests description: This article explains how to add a Check to a Control --- [Skip to content](https://knowledge.adoptech.co.uk/understanding-controls-checks-and-tests#main-content) [![Adoptech-logo-GreyWithoutStrapline-1.png\]](https://knowledge.adoptech.co.uk/hs-fs/hubfs/Adoptech-logo-GreyWithoutStrapline-1.png?height=39&name=Adoptech-logo-GreyWithoutStrapline-1.png)](https://knowledge.adoptech.co.uk/?hsLang=en) Open main navigation Close main navigation Adoptech Help Centre - There are no suggestions because the search field is empty. 1. [Knowledge base](https://knowledge.adoptech.co.uk/?hsLang=en) 2. [FAQ's on Adoptech](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en) 3. [Frameworks](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#frameworks) # Understanding Controls, Checks and Tests ## Learn how Adoptech preserves native framework requirements whilst reusing checks, tests and evidence to reduce compliance effort. #### **Overview** Many organisations need to comply with multiple frameworks such as ISO 27001, SOC 2, DORA, NIST 800-53 and Cyber Essentials. A common challenge is that similar requirements appear across multiple frameworks, often leading to duplicated testing and evidence collection. Without a structured approach, organisations often find themselves collecting the same evidence multiple times for different frameworks. Adoptech solves this problem by preserving the original requirements from each framework while reusing checks, tests and evidence wherever genuine overlap exists. This allows organisations to reduce duplication without losing visibility of the original framework requirements. ---   #### **The Adoptech Compliance Model** **Policies → Risks → Controls → Checks → Tests** **![111](https://knowledge.adoptech.co.uk/hs-fs/hubfs/111.jpg?width=670&height=103&name=111.jpg)** **This creates a clear and auditable path from organisational requirements through to compliance evidence.**  ### **Controls** Controls are the safeguards implemented to reduce risk and achieve policy objectives. They are often required by a framework, regulation or legislation. Examples include: - ISO 27001 A.8.24 – Use of Cryptography - NIST 800-53 SC-28 – Protection of Information at Rest Adoptech preserves these requirements exactly as they appear in the source framework. ### **Checks** Checks define how a control is monitored or reviewed. Examples: - Review endpoint encryption status - Review privileged access - Verify vulnerability scanning is performed ### **Tests** Tests provide the evidence used to validate a check. Tests can be: - Automated (via integrations) - Manual (performed by users) Test results provide the evidence used to demonstrate compliance. --- #### **Understanding Controls, Checks and Tests** ![2222](https://knowledge.adoptech.co.uk/hs-fs/hubfs/2222.jpg?width=670&height=192&name=2222.jpg) ### **Why Adoptech Preserves Native Controls** Many compliance platforms create a proprietary control framework and then map standards into those controls. While this can simplify administration, it can also make it harder to: - Trace requirements back to their source - Demonstrate compliance to auditors - Maintain alignment with regulatory requirements Adoptech takes a different approach. We preserve the original controls from each framework and do not replace them with an Adoptech control library. This ensures organisations can demonstrate compliance directly against the requirements that apply to them --- ### **Where Evidence Reuse Happens** Adoptech reuses evidence at the **Check** and **Test** level. A single test result can provide evidence for multiple framework requirements. The controls remain separate. The evidence is reused. --- ### **Why This Matters** This approach helps organisations: - Reduce duplicated effort - Maintain alignment with source frameworks \\ legislation - Improve audit readiness - Increase automation - Improve traceability Rather than managing each framework independently, organisations can reuse evidence efficiently whilst maintaining visibility of the individual requirements that apply to them. Need Help? Contact [**support@adoptech.co.uk**](mailto:support@adoptech.co.uk) or open a chat    - [Getting Started](https://knowledge.adoptech.co.uk/getting-started?hsLang=en#main-content) - [Getting Started](https://knowledge.adoptech.co.uk/getting-started?hsLang=en#getting-started) - [Accounts & Billing](https://knowledge.adoptech.co.uk/getting-started?hsLang=en#accounts-billing) - [FAQ's on Adoptech](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#main-content) - [Frameworks](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#frameworks) - [Policies & Documents](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#policies-documents) - [Risk Management](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#risk-management) - [Supplier Management](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#supplier-management) - [Audit Preparation](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#audit-preparation) - [Trust Centre](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#trust-centre) - [User Management](https://knowledge.adoptech.co.uk/faqs-on-adoptech?hsLang=en#user-management) - [Frameworks & Certifications](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#main-content) - [ISO 27001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-27001) - [ISO 42001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-42001) - [Cyber Essentials](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#cyber-essentials) - [CAF](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#caf) - [PCI-DSS](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#pci-dss) - [SOC2](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#soc2) - [Data Privacy (GDPR)](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#data-privacy-gdpr) - [DORA](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#dora) - [ISO 9001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-9001) - [ISO 22301](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-22301) - [ISO 14001](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-14001) - [NIST 800-53](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#nist-800-53) - [NIST-CSF](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#nist-csf) - [NIS2](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#nis2) - [ISO 20000-1](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#iso-20000-1) - [HIPAA](https://knowledge.adoptech.co.uk/frameworks-certifications?hsLang=en#hipaa) - [Integrations](https://knowledge.adoptech.co.uk/integrations?hsLang=en#main-content) - [Cloud Infrastructure](https://knowledge.adoptech.co.uk/integrations?hsLang=en#cloud-infrastructure) - [Identity & Access](https://knowledge.adoptech.co.uk/integrations?hsLang=en#identity-access) - [DevOps & Code](https://knowledge.adoptech.co.uk/integrations?hsLang=en#devops-code) - [Project Management](https://knowledge.adoptech.co.uk/integrations?hsLang=en#project-management) - [HR & People Systems](https://knowledge.adoptech.co.uk/integrations?hsLang=en#hr-people-systems) - [Security & Devices](https://knowledge.adoptech.co.uk/integrations?hsLang=en#security-devices) - [Communication & Collaboration](https://knowledge.adoptech.co.uk/integrations?hsLang=en#communication-collaboration) - [Legal & Regulations](https://knowledge.adoptech.co.uk/legal-regulations?hsLang=en) - [Security Guidance](https://knowledge.adoptech.co.uk/security-guidance?hsLang=en) - [Troubleshooting](https://knowledge.adoptech.co.uk/troubleshooting?hsLang=en) [![Chill listening crop-3](https://knowledge.adoptech.co.uk/hs-fs/hubfs/adoptech-logo-1.png?width=209&height=54&name=adoptech-logo-1.png "Chill listening crop-3")](https://adoptech.co.uk/) Copyright © 2026, Adoptech Ltd.