I believe we used to be able to add internal controls directly from the compliance analysis screen. However, I do not seem to be able to do that any longer. Perhaps this was lost in the 2.x update (?). Now, when I am performing a compliance analysis, I cannot add a “missing” control.
Being able to do this would make the workflow MUCH easier. During an initial build out, you basically have to have 2 tabs open and constantly switch back (which also doesn’t really work because newly added controls won’t be available for mapping to the compliance item due to caching, I think). With this feature, a user would be able to build out their control library directly referencing PCI/CIS, for example.