---
title: Manage and implement control tests
description: From a list of security controls stemming from NIST 800-53.r4 policy statements, review the control tests and update implementation details.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/rmf-manage-implement-control-tests.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Implement security controls, Process overview, NIST RMF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Manage and implement control tests

From a list of security controls stemming from NIST 800-53.r4 policy statements, review the control tests and update implementation details.

## Before you begin

**Note:** Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, [Continuous Authorization and Monitoring](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/continuous-risk-monitoring/grc-cam-landing-page.md).

Role required: sn\_irm\_nist\_rmf.risk\_executive or sn\_irm\_nist\_rmf.security\_officer

## Procedure

1.  Navigate to **All** > **NIST RMF** > **Implement** > **Active Control Tests**.

2.  Review each control test and physically implement them following the standard approach outlined in the Audit Management application.


**Parent Topic:**[Implement security controls](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/rmf-implement.md)