For Control records, who can modify the Control in the Draft state?

• A. Only Control Owners
• B. All compliance users
• C. Only the person assigned the Attestation
• D. Only the Compliance Manager

Answer: (B)

Draft state is intended for collaborative preparation of a Control, so editing rights are broader to support the compliance team. In ServiceNow IRM, anyone with the Compliance role (all compliance users) can modify a Control while it remains in Draft. The Attestation assignment is a separate workflow step and doesn’t gate editing permissions in Draft. While a Compliance Manager has broad privileges, the system specifically allows all compliance users to edit in Draft, which is why that option is the best choice.