Manage and implement controls

---
title: Manage and implement controls
description: From a list of security controls stemming from NIST 800-53.r4 policy statements, review the controls and update implementation details.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/governance-risk-compliance/grc-common-functions/rmf-manage-implement-controls.html
release: brazil
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Implement security controls, Process overview, NIST RMF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Manage and implement controls

From a list of security controls stemming from NIST 800-53.r4 policy statements, review the controls and update implementation details.

## Before you begin

**Note:** Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, [Continuous Authorization and Monitoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/continuous-risk-monitoring/grc-cam-landing-page.md).

Role required: sn\_irm\_nist\_rmf.risk\_executive or sn\_irm\_nist\_rmf.security\_officer

## Procedure

1.  Navigate to **All** > **NIST RMF** > **Implement** > **Active Controls**.

2.  Review each control and physically implement them following the standard approach outlined in the Policy and Compliance Management application.


**Parent Topic:**[Implement security controls](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/grc-common-functions/rmf-implement.md)