SaaS & GRC Controls

Where to find it

Opened from SaaS Discovery (the Preferred & GRC button)

Who can use it

Anyone whose compliance (GRC) role includes viewing; setting or clearing a preferred tool needs compliance edit permission

Plan

Included

For

Everyone

What the page is for

Lavawall's SaaS discovery finds the cloud applications people in your organization sign up for and use. This page connects those findings to your compliance controls. For each control, it shows the categories of app that matter (for example file sharing or AI assistants) and every app detected in each category, with how many users and emails were seen.

You can mark one app in each category as the preferred tool. Any other app detected in that category is then highlighted as non-preferred, so shadow IT stands out. Preferred AI tools are also listed as approved in the AI policies Lavawall generates for you.

What you see

1. Summary cards: Controls with SaaS detected, Controls with a preferred tool set, Non-preferred tools detected and Total apps across mapped controls.
2. Filter bar: search by control code, name or app; filter by relevance (Primary or Secondary) and status (Has preferred tool, Has non-preferred tool, No preferred set); Clear.
3. Page buttons: All Apps (back to SaaS Discovery) and Refresh.
4. Control cards: each control with its relevance, and under it each app category with its detected apps. Preferred apps are marked with a star; non-preferred apps are highlighted in amber. Each app shows its user and email counts and a Set preferred or Clear preferred button.
5. App users: select an app to see who uses it: User, Trigger, Confidence, First seen, Last seen and Signals.

How to set the preferred tool for a category

1. Find the control and category, for example by typing the app name in the search box.
2. On the app you want to approve, select Set preferred.
3. In Set preferred tool, add an optional Note and select Set as Preferred. Other detected apps in that category are highlighted as non-preferred.

How to clear a preferred tool

1. On the preferred app (marked with a star), select Clear preferred.
2. Confirm Yes, remove it. No tool is marked as preferred for that category.

How to see who uses an app

1. Select the app's card.
2. Review the App users list, including when each person was first and last seen and how confident the detection is.

How to find the gaps

1. Set the status filter to Has non-preferred tool to see where people use unapproved apps.
2. Set it to No preferred set to see categories where you have not chosen a tool yet.

Tips

• Start with categories marked Primary; they matter most for the control.
• Set a preferred AI tool before generating your AI policy, so the approved tool is named in it.
• Use Refresh after new discovery results come in.
• Talk to the users of a non-preferred app before blocking it. The App users list shows who they are.

Troubleshooting

• "No GRC controls have SaaS detections for this company yet." SaaS discovery has not found apps that map to your controls. Make sure SaaS discovery is set up and has run.
• "Your GRC role does not include access to this page." Ask an administrator to change your compliance role.
• "The preferred tool could not be set." You may not have compliance edit permission. Ask an administrator.

Related articles

• SaaS Discovery (Reports)
• Security Controls (Compliance (GRC))
• Vendor Inventory (Business continuity)
• Document Library (Compliance (GRC))

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.