Removing a framework

Contact your Oneleet team to remove a framework from your security program.

Removing a framework also removes unused controls that were automatically added for it. Controls stay when another framework requires them or when they contain work such as evidence, review history, assignments, or custom content. Manually added controls and older controls whose origin isn’t recorded also stay for review with your Oneleet team.

Monitors used only by removed controls are archived. Shared monitors continue running, and historical monitor results are retained.

Adding the framework again restores its missing default controls. A framework that another installed framework extends must remain until that dependent framework is removed.