# Create a custom compliance framework

> [!WARNING]
>
> **Preview
> --- Audit Manager compliance framework management**
>
>
> This feature is
>
> subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the
> [Service Specific
> Terms](https://docs.cloud.google.com/terms/service-terms#1).
>
> Pre-GA features are available "as is" and might have limited support.
>
> For more information, see the
> [launch stage descriptions](https://cloud.google.com/products/#product-launch-stages).

You can create a custom compliance framework in Audit Manager in the following two ways:

- Create a new custom compliance framework.
- Create a custom compliance framework from an existing compliance framework.

## Before you begin

- Ensure that you have the Audit Manager Custom Compliance Framework Admin (`roles/auditmanager.ccfAdmin`) IAM role.
- Review and identify the cloud controls for your custom compliance framework. To view the list of available cloud controls, navigate to the Audit Manager home page and click **Controls**.

## Create a new custom compliance framework

1. In the Google Cloud console, go to the **Audit Manager** page.

   [Go to Audit Manager](https://console.cloud.google.com/compliance/auditmanager)
2. Click **Frameworks**.

   A list of built-in compliance frameworks is displayed on the **Frameworks** page.
3. On the **Frameworks** page, click **Create framework**.

4. In the **Basic information** section, do the following:

   1. In the **Name** field, enter the name of the compliance framework that meets the following requirements:

      - Be unique.
      - Be 1-63 characters in length.
      - Match the regular expression `^[a-z]([-a-z0-9]*[a-z0-9])?`. This means that the first character must be a lowercase letter, and all the following characters must be hyphens, lowercase letters, or digits, except the last character, which cannot be a hyphen.
   2. In the **Description** field, enter the description of the compliance framework.

5. Click **Continue**.

6. In the **Control selection** section, select the regulatory and Google Cloud
   defined cloud controls to your compliance framework. You can copy cloud controls from an
   existing compliance framework, add individual cloud controls, or both.

   1. To copy cloud controls from an existing compliance framework,
      click **Select framework to copy** . In the **Select framework to copy** pane,
      select the built-in or custom compliance frameworks that you want, and then click **Add**.

   2. To add the individual cloud controls, click **Add controls** .
      Select one or more cloud controls that you want, and then click **Select** .
      All the selected controls are displayed in the **Selected controls** table.

7. Click **Continue**.

8. In the **Specify parameter** section, some of the selected controls might
   require one or more of the following parameter inputs. If prompted, enter
   the required value types and values according to the displayed parameters.

   - **Location** : Specify location boundaries for your resources. For more information, see [Restricting resource locations](https://docs.cloud.google.com/resource-manager/docs/organization-policy/defining-locations).
   - **Allowed Services** : Specify hierarchical restrictions on Google Cloud resource services within a resource container, such as an organization, a folder, or a project. For more information, see [Restricting resource usage](https://docs.cloud.google.com/resource-manager/docs/organization-policy/restricting-resources).
   - **Services Requiring CMEK** : Specify restrictions on the creation of certain Google Cloud services without the presence of a customer-managed encryption key (CMEK). For more information, see [CMEK organization policies](https://docs.cloud.google.com/kms/docs/cmek-org-policy).
9. Click **Continue**.

10. In the **Review** section, verify the compliance framework configuration, and then click **Create**.

    The custom compliance framework is created.

## Create a custom compliance framework from an existing compliance framework

1. In the Google Cloud console, go to the **Audit Manager** page.

   [Go to Audit Manager](https://console.cloud.google.com/compliance/auditmanager)
2. Click **Frameworks**.

   The following two tabs are displayed on the **Frameworks** page. You can
   create a compliance framework from a built-in or an existing custom compliance framework.
   - **Built-in**
   - **Custom**
3. Select the required tab.

4. Locate the compliance framework you want to copy, click **More options** ,
   and then click **Copy to create new framework** .
   Alternatively, you can click the compliance framework name in the **Name** column, and then click **Copy to create new framework** .
   The **Create new framework** page is displayed.

5. The name and description of the compliance framework are displayed in the **Basic information** section.
   Modify the fields as needed, and then click **Continue**.

6. The selected cloud controls are displayed in the **Control selection** section. Add or remove the cloud controls as needed, and then click **Continue**.

7. The parameter values and value types are displayed in the **Specify parameter** section. Modify the fields as needed, and then click **Continue**.

8. Verify the compliance framework configuration in the **Review** section, and then click **Create**.

   The custom compliance framework is created.

## What's next

- [Run an audit](https://docs.cloud.google.com/audit-manager/docs/run-audit).
- [Edit or delete a custom compliance framework](https://docs.cloud.google.com/audit-manager/docs/edit-framework).