From Vision to Execution
On Day 1, we introduced the New Drata Experience and why it matters: enterprise GRC programs have outgrown fragmented interfaces, manual workflows, and UI patterns that don’t scale.
Day 2 is about execution.
Because design only matters if it changes how work actually happens. The New Drata Experience isn’t just a unified interface, it enables faster setup, clearer signals, and less manual effort across the most time-consuming parts of compliance work. From managing large datasets to understanding test failures, these capabilities reduce time-to-task while preserving the structure required for audit readiness and future automation.
The Challenge: Daily GRC Work Doesn’t Scale
As GRC programs mature, teams face a common set of operational bottlenecks:
- Large volumes of risks, controls, and training data that require manual entry or support tickets
- Tables that reset constantly, forcing teams back into spreadsheets
- Fragmented test discovery and inconsistent test provisioning across workspaces
- Limited visibility into what changed, what failed, and what needs attention now
These aren’t edge cases—they’re daily friction points that slow reviews, increase errors, and delay readiness. The New Drata Experience addresses these problems directly by rebuilding the workflows where GRC teams spend most of their time.
The Solution: Core Workflows Built for Scale
Self-Serve Bulk Import for Structured Data
The New Drata Experience introduces self-serve bulk imports for custom risks, controls, and personnel training evidence using CSV or XLSX files.
Teams can now manage large data sets directly in the product. Bulk import supports both initial onboarding and ongoing updates, removing a major operational bottleneck for enterprise programs.
This capability is foundational: structured data is required for consistent reviews, automation, and reliable reporting.
Configurable Tables with Remembered Preferences
Tables are the primary work surface for GRC teams, and they’re now designed for daily operational use, not just review.
With configurable columns, pinned columns, row density options, saved filters, and remembered preferences, teams can shape tables around how they actually work. OpenSearch-powered search enables fast querying across large datasets, and Custom Fields are now visible and searchable directly in-table.
The result: fewer spreadsheet exports, fewer repeated setup steps, and faster navigation across controls, risks, vendors, monitoring, and personnel.
OpenSearch & Custom Fields
As GRC programs scale, finding the right data quickly becomes a daily challenge. Enterprise teams manage large volumes of controls, risks, vendors, and personnel records—often with custom metadata layered on top. Limited or exact-match search slows reviews and pushes teams back to spreadsheets.
The New Drata Experience introduces OpenSearch-powered search across key tables, including Controls, Risks, Vendors, Monitoring, and Personnel (coming soon). This enables faster performance for large datasets and more flexible search behavior, helping teams find records even when search terms are incomplete or slightly misspelled.
Where Custom Fields are supported, those fields now appear directly in tables and can be searched and filtered alongside standard fields. Teams can work with their own metadata inside Drata—without exporting data or reconfiguring views every session.
Together, OpenSearch and Custom Fields reduce time-to-task and support predictable execution as programs grow.
AI-Generated Cloud Tests
By centralizing the Drata Test Library and enabling flexible provisioning across programs and workspaces, compliance managers gain clear visibility and control over their testing strategy.
Teams can discover, evaluate, and provision the right tests,individually or in bulk—while reducing duplication and ongoing administrative overhead.
The Test Library is backed by Drata’s AI-assisted test generation for cloud infrastructure. Using Drata’s control framework and the data collected from AWS, Azure, and GCP, Drata’s AI team generated a new set of granular infrastructure compliance tests designed to improve coverage and configurability.
Every test was reviewed by external auditors across multiple audit partners to validate its usefulness for compliance monitoring, confirm appropriate control mappings, and classify whether each test is essential or recommended for baseline SOC 2 Type II programs.
Today, the Test Library includes over 1,000 new infrastructure tests across AWS, Azure, and GCP—covering 165 unique controls and more than 100 cloud resources—giving teams both breadth and depth without sacrificing audit confidence.
Actionable Insights That Surface What Changed
Instead of manually checking test statuses, Actionable Insights highlight what actually changed in the last 24 hours.
Teams can see summaries of recent pass-to-fail events, aggregated connection errors affecting multiple tests, and mean time to remediation (MTTR) trends. These insights help teams prioritize work, reduce time spent diagnosing issues, and move toward continuous compliance operations.
Ticket creation from summarized issues further reduces handoffs between compliance and technical teams.
How Teams Get Work Done Faster in Drata
1. Find the Right Record Instantly—Even at Enterprise Scale
Problem:
As programs grow, search becomes brittle. Teams can’t find the right control, risk, or vendor quickly—especially when relying on custom fields or imperfect search terms.
Drata Solution:
OpenSearch-powered search across Controls, Risks, Vendors, Monitoring, and Personnel (Coming soon), with support for fuzzy matching and Custom Fields directly in tables.
Outcome:
Teams find what they need faster across large datasets—without exact identifiers, manual filtering, or spreadsheet exports.
2. Make Tables Match How Your Program Actually Operates
Problem:
Default table layouts don’t reflect how enterprise GRC teams work. Critical fields are buried, columns can’t be rearranged, and teams waste time scanning for what matters.
Drata Solution:
Configurable tables that allow teams to show/hide, pin, and reorder/resize columns, as well as adjust row density.
Outcome:
Teams bring the most important data front and center, reducing review time and enabling consistent, repeatable workflows across programs.
3. Stop Reconfiguring Views Every Time You Log In
Problem:
GRC work is repetitive—but table setup shouldn’t be. Teams repeatedly reapply filters, row counts, and layouts every time a page refreshes or a session ends.
Drata Solution:
Remembered table preferences across the application, including column configuration, filters, row density, and rows displayed.
Outcome:
Less manual setup, fewer interruptions, and predictable execution—so teams can focus on review and remediation, not UI management.
Why It Matters: A Foundation for What Comes Next
The New Drata Experience is intentionally built as a foundation. Structured data, consistent workflows, and scalable interfaces aren’t just usability improvements, they’re prerequisites for intelligent automation and future AI-driven insights.
By reducing time-to-task today, Drata enables teams to operate independently now and evolve confidently as programs grow.
Explore how the New Drata Experience helps GRC teams reduce friction, scale operations, and stay audit-ready with clarity and control. Book a demo to learn more.
