{"id":3439,"date":"2026-08-13T09:22:17","date_gmt":"2026-08-13T08:22:17","guid":{"rendered":"https:\/\/icomply.pm\/first-steps\/"},"modified":"2026-08-16T22:53:05","modified_gmt":"2026-08-16T21:53:05","slug":"first-steps","status":"publish","type":"page","link":"https:\/\/icomply.pt\/en\/documentation\/first-steps\/","title":{"rendered":"First steps"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"3439\" class=\"elementor elementor-3439 elementor-3340\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-96d81cd e-flex e-con-boxed e-con e-parent\" data-id=\"96d81cd\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-057dcf1 e-con-full e-flex e-con e-child\" data-id=\"057dcf1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dc11bcd elementor-icon-list--layout-inline elementor-align-start elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"dc11bcd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Documentation<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">\/<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><span style=\"color: #c3ccd8\">First steps<\/span><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ec7637 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"4ec7637\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Guide \u00b7 10 min<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e246c92 elementor-widget__width-initial elementor-widget elementor-widget-image-box\" data-id=\"e246c92\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">First steps<\/div><p class=\"elementor-image-box-description\">Set up your organisation, invite users and launch your first governance domain \u2014 from the initial login to the first audit with attached evidence.\n\n<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0eb6607 e-flex e-con-boxed e-con e-parent\" data-id=\"0eb6607\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-152e146 content_34535345 elementor-widget elementor-widget-text-editor\" data-id=\"152e146\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"icbody\" style=\"min-width: 0;\"><p>This guide takes you from your first login through to gaining a firm grasp of operational governance: organisational structure, users and profiles, domain selection, the controls library and the first evidence uploaded. Allow around <strong>an hour<\/strong> for the initial set-up. <\/p><h2 id=\"antes\">Before you begin<\/h2><p>Gather these items together \u2014 it\u2019ll save you a lot of running back and forth later:<\/p><ul><li><strong>Organisational scope.<\/strong> Which legal entities, business units or countries will be managed on the platform.<\/li><li><strong>Target Frameworks.<\/strong> The standards and laws you need to comply with first (e.g. ISO 27001, GDPR, NIS2).<\/li><li><strong>Those responsible.<\/strong> Who is responsible for each area: security, privacy, legal, HR, IT.<\/li><li><strong>Existing documentation.<\/strong> Policies, records and evidence that you already have \u2014 these will be reused, not recreated.<\/li><\/ul><h2 id=\"passo-1\">Step 1 \u2014 Create and configure the organisation<\/h2><p>When you log in for the first time, your organisation\u2019s tenant is created. All data is isolated within this tenant, with row-level security \u2014 no other organisation has visibility of it. <\/p><h3>Organisation details<\/h3><ul><li><strong>Name and tax registration number<\/strong> \u2014 used in reports and exported documents.<\/li><li><strong>Sector of activity <\/strong>\u2014 determines which frameworks are suitable (e.g. DORA for financial services).<\/li><li><strong>Size<\/strong> \u2014 number of employees, relevant for regulatory thresholds (NIS2, Pay Transparency, CSRD).<\/li><li><strong>Language and time zone <\/strong>\u2014 these affect deadlines, notifications and the language of reports.<\/li><\/ul><h3>Organisations and structure<\/h3><p>If your group comprises several legal entities, set them up now in <code>Administra\u00e7\u00e3o \u2192 Entidades<\/code>. Each entity can have its own controls, risks and evidence, and reports can be consolidated or individual. You don\u2019t have to get everything right first time \u2014 the structure is editable.  <\/p><h2 id=\"passo-2\">Step 2 \u2014 Invite users and assign profiles<\/h2><p>In <code>Administra\u00e7\u00e3o \u2192 Utilizadores<\/code>, invite the team by email. Each invitation has a profile that determines what the person can see and do. <\/p><ul><li><strong>Administrador<\/strong> \u2014 configura\u00e7\u00e3o da organiza\u00e7\u00e3o, utilizadores, fatura\u00e7\u00e3o e todos os dom\u00ednios.<\/li><li><strong>Domain manager <\/strong>\u2014 full control over one or more assigned governance domains.<\/li><li><strong>Contributor<\/strong> \u2014 carries out tasks and records evidence in the controls for which they are responsible.<\/li><li><strong>Auditor \/ Leitura<\/strong> \u2014 acesso de leitura a controlos, evid\u00eancias e relat\u00f3rios, sem poder alterar.<\/li><\/ul><p>For external consultants, use the <strong>Auditor <\/strong>or Limited-scope <strong>Domain Manager<\/strong> profile, restricted to the scope of the work. Access may be subject to an expiry date. <\/p><h3>Authentication<\/h3><p>We recommend enabling <strong>MFA <\/strong>for all users from the outset. On Enterprise plans, you can configure <strong>SSO \/ SCIM <\/strong>in <code>Administra\u00e7\u00e3o \u2192 Autentica\u00e7\u00e3o<\/code> and provision users from your directory. <\/p><h2 id=\"passo-3\">Step 3 \u2014 Activate the first governance domain<\/h2><p>Don\u2019t try to tackle everything at once. Choose one area \u2014 usually one with an upcoming regulatory deadline or audit \u2014 and do it properly. The others will take a fraction of the effort, because you can reuse the same controls.  <\/p><ul><li>Do you need to achieve ISO 27001 certification or comply with NIS2\/DORA? \u2192 Start with <strong>Security Governance<\/strong>.<\/li><li>Are you facing pressure from the GDPR, ROPA or requests from data subjects? \u2192 Start with <strong>Privacy Governance<\/strong>.<\/li><li>You\u2019re introducing AI into your organisation \u2192 start with <strong>AI governance<\/strong>.<\/li><\/ul><p>In <code>Dom\u00ednios \u2192 Ativar<\/code>, select the domain and the relevant frameworks. The platform automatically generates the corresponding control library. <\/p><h2 id=\"passo-4\">Step 4 \u2014 Review the controls library<\/h2><p>The controls are pre-populated based on the chosen frameworks. Your task at this stage is to <strong>assign responsible parties and frequencies<\/strong>, not to rewrite the controls. <\/p><ol><li>Go through the list and mark anything that falls outside the scope as \u2018<strong>Not applicable<\/strong>\u2019, giving a reason (this will be noted for the auditor).<\/li><li>Assign a person <strong>responsible<\/strong> for each applicable control.<\/li><li>Set the <strong>frequency of reviews<\/strong> (monthly, quarterly, annually) \u2014 this is what ensures the guarantee is ongoing rather than a one-off.<\/li><\/ol><h2 id=\"passo-5\">Step 5 \u2014 Upload the first piece of evidence<\/h2><p>Open a check and attach a document you already have \u2014 a policy, a log, or a configuration screenshot. As soon as you do this, you\u2019ll see what sets iComply apart: the check dashboard shows <strong>all the requirements across all the frameworks<\/strong> that this evidence has just met. <\/p><p>The evidence is versioned. When the document is replaced, the history is retained \u2014 this is what ensures audit traceability. <\/p><h2 id=\"passo-6\">Step 6 \u2014 Check the status panel<\/h2><p>On the main dashboard, you should now be able to see your real-time compliance status: the percentage of controls in place, missing evidence, overdue tasks and risk by area. This is the view that is presented at management meetings. <\/p><h2 id=\"seguir\">What to do next<\/h2><p>Now that the first domain is up and running, the next logical step is:<\/p><ul><li>Enable a second domain and see the shared controls being reused \u2014 see <a href=\"https:\/\/icomply.pt\/en\/documentation\/governance-domains\/\">Governance domains<\/a>.<\/li><li>Exploring cross-mapping in more detail \u2014 see <a href=\"https:\/\/icomply.pt\/en\/documentation\/controls-mapping\/\">Controls &#038; mapping<\/a>.<\/li><li>Prepare for the first internal audit \u2014 see <a href=\"https:\/\/icomply.pt\/en\/documentation\/evidence-audits\/\">Evidence &#038; audits<\/a>.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c1ceafa e-con-full max_w_280 e-flex e-con e-child\" data-id=\"c1ceafa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f6bf16f elementor-widget__width-inherit elementor-widget elementor-widget-table-of-contents\" data-id=\"f6bf16f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;headings_by_tags&quot;:[&quot;h2&quot;],&quot;exclude_headings_by_selector&quot;:[],&quot;marker_view&quot;:&quot;bullets&quot;,&quot;icon&quot;:{&quot;value&quot;:&quot;&quot;,&quot;library&quot;:&quot;&quot;},&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:0,&quot;sizes&quot;:[]},&quot;min_height_tablet_extra&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tOn this page\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__f6bf16f\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<svg class=\"elementor-toc__spinner eicon-animation-spin e-font-icon-svg e-eicon-loading\" aria-hidden=\"true\" viewBox=\"0 0 1000 1000\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M500 975V858C696 858 858 696 858 500S696 142 500 142 142 304 142 500H25C25 237 238 25 500 25S975 237 975 500 763 975 500 975Z\"><\/path><\/svg>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-533406b e-con-full e-flex e-con e-child\" data-id=\"533406b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d6c62c1 elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"d6c62c1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Need a hand getting started?<\/div><p class=\"elementor-image-box-description\">Our team will carry out the onboarding process with your organisation and set up your first domain together with you.\n\n<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-38d5622 elementor-align-justify elementor-widget__width-inherit elementor-widget elementor-widget-button\" data-id=\"38d5622\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/icomply.pt\/en\/contact\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Talk to the team<br \/><\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bd327d3 e-flex e-con-boxed e-con e-parent\" data-id=\"bd327d3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f656ed4 elementor-widget elementor-widget-heading\" data-id=\"f656ed4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Continue reading\n<\/h3>\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d9a3667 e-con-full e-grid e-con e-child\" data-id=\"d9a3667\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<a class=\"elementor-element elementor-element-44b6227 e-con-full e-flex e-con e-child\" data-id=\"44b6227\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/icomply.pt\/en\/documentation\/governance-domains\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c4e6483 elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"c4e6483\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Governance Domains<\/div><p class=\"elementor-image-box-description\">Configure Security, Privacy, AI and all other areas.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-bd9be3d e-con-full e-flex e-con e-child\" data-id=\"bd9be3d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/icomply.pt\/en\/documentation\/controls-mapping\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d5b8127 elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"d5b8127\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Controls &amp; mapping<\/div><p class=\"elementor-image-box-description\">Map controls once and reuse them across all frameworks.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-80998ac e-con-full e-flex e-con e-child\" data-id=\"80998ac\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/icomply.pt\/en\/documentation\/administration-access\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6b17771 elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"6b17771\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Administration &amp; access<\/div><p class=\"elementor-image-box-description\">Profiles, permissions, SSO, billing and organisation settings.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Documentation \/ First steps Guide \u00b7 10 min First steps Set up your organisation, invite users and launch your first governance domain \u2014 from the initial login to the first audit with attached evidence. This guide takes you from your first login through to gaining a firm grasp of operational governance: organisational structure, users and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":2895,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_ice_seo_score":0,"_ice_review":"","footnotes":""},"class_list":["post-3439","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/3439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/comments?post=3439"}],"version-history":[{"count":8,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/3439\/revisions"}],"predecessor-version":[{"id":3768,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/3439\/revisions\/3768"}],"up":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/2895"}],"wp:attachment":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/media?parent=3439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}