For Control records, who can modify the Control in the Draft state?

The correct answer is that all compliance users can modify the Control in the Draft state. This reflects ServiceNow's design that allows flexibility and broad participation in the management of compliance controls. A Draft state typically indicates that the control is still under development or review, meaning multiple users involved in compliance processes should have the ability to suggest changes, add details, or refine the control before it is finalized.

This encourages collaboration among various roles within an organization, ensuring that diverse perspectives are considered in the control's formulation. Broad access helps to enhance the control's effectiveness, as compliance users bring different insights and expertise to the process.

Roles like the Compliance Manager, individuals assigned to attestations, or Control Owners may have specific responsibilities or elevated permissions in other contexts, but during the Draft state, the intent is to facilitate input from all compliance users to improve the overall quality and applicability of the control being developed.