Yes. MetricStream IT and Cyber Policy Management allows you to link IT and cyber policies or sections to regulations, risks, controls, departments, business units, etc. You can also link various reference documents to the policies as well as its sections. The product allows linking in one-to-one, one-to-many, many-to-one, many-to-many mapping between policies and other GRC areas like compliance, risk, and the control framework.