Diri lets you keep supporting documents next to the work they belong to: a supplier's contract on the vendor, a system description on the IT system, a process diagram on the business process, or an attachment on a policy. Every uploaded file is attached to a record. The Files page gathers them all in one list.
Open Governance & Compliance > Files in the left-hand menu. The list shows every uploaded file you have access to, with the record type (Resource) and the record (Resource item) it is attached to.
If you see "You do not have permission to see uploaded files", your role does not include access to files. Ask your administrator.
You can also upload files directly in many forms, for example on IT systems, vendors, policies and business processes (under Process flow and documentation). A new business process must be saved before you can attach files to it.
Supported files: Word, Excel, PDF, JPEG, JPG and PNG. The maximum file size is 20 MB. The Upload Files button is only active if your role allows you to upload files.
In registers such as IT systems and vendors, a row with attachments shows an attachment icon ("View/download … attachments"). Select it to open Download Selected Files:
A file belongs to the record it is attached to. In practice, you see a file when your role gives access to files and you can see the record, whether the record is your organisation's own, inherited from a parent organisation or shared with you. See Inheriting and sharing.
If a file you expect is missing, check that you are working in the right organisation and that the record it is attached to is visible to you.
A document from the file library can be linked as evidence for a framework control. On the control, select Connect resource and choose File as the resource type. You can also add an External link with a name and a URL, for example a supplier's published security documentation.
Diri warns you when the person responsible for a control, or the sub-organisations that rely on a central control, cannot open a linked document, and offers to share it with them. Evidence that is no longer available is marked on the control. See Controls and evidence.