Document Management

What Are Documents in Imara?

Documents are policies, procedures, standards, work instructions, and other formal records that make up an organization's compliance program. Frameworks like SOC 2 and ISO 27001 require certain policies to be documented and kept up to date. Imara centralizes the creation, approval, and version control of these documents.

Document Types

• Policy — High-level statements defining the organization's principles and directions (e.g., Access Control Policy)
• Procedure — Detailed instructions on how to execute a specific process
• Standard — Specific technical requirements that must be followed
• Work Instruction — Step-by-step operational guides
• Diagram — Visual representations of architectures or processes
  
  

Creating a Document

1. Go to Documents in the side menu and click New Document.
2. Select the document type.
3. Enter the content using the text editor (Markdown and rich text supported).
4. Link the document to relevant frameworks and controls.
5. Save as Draft or submit for approval.
   
   

Document Templates

Imara includes pre-configured templates for the main policies required by each framework. When you add a framework, the corresponding templates become available in the Documents section, significantly accelerating the creation of your document program.

Version Control

Every time a document's content changes, a new version is automatically created. The complete version history is available for audit, including who made the change and when.

Linking to Controls

Documents can be linked to specific controls as compliance evidence. For example, the Access Control Policy can be linked to all controls related to identity and access management.