Complete an Assessment

As you complete an assessment there are a number of features you can utilise:

• Easy question navigation to move about questions
• Flag to come to back to question later
• Note to add custom notes
• Add Evidence
• Actions (auto populated with ability to customise)
• Key findings (review your key findings straight away)
• Standards (review the specific standards and related controls this assessment question is mapped to)
• Risk Scenarios that show you which Risk the controls that relate to this question will impact
• Help Guide to learn about the control in question, get access to tools and templates and get advice on what type of evidence an auditor will typically look for.

Step-by-Step Guide to completing an Assessment

To conduct a control assessment:

1. Create a New Assessment including setting up the scope of the assessment, select in-scope assets and standards.
2. Answer the carefully prepared questions.

Optional features you will see as you travel through a control assessment:

1. Learn more about each question.
2. View our suggested actions based on your response.
3. View requirements from in-scope industry standards
4. Add your own actions.
5. Upload evidence.
6. Create Notes.

Create Notes

Read more about how notes work.

Upload Evidence

• Upload evidence
• Flag evidence as confidential, public or internal use only so you can filter evidence included in reports.
• Read more about how to best add evidence to security assessments.

View Key Findings

Immediately view both good and bad findings based on your response.

Get Instant Suggested Actions

Get instant suggested actions based on your responses.

Create Custom Actions

Create custom actions and delink the suggested actions if required.

Read more about customising actions.

Learn more about each question.

Select the Help Guide button on the top right of every question to access:

• An overview of what the control is.
• Suggestions for how to teats and measure the controls.
• Helpful tools and templates to hep you implement the control.
• Suggested evidence which an auditor would likely request.

View Related Standards

View requirements that align to this question from related industry standards.

‍

‍

‍

‍

‍

‍

‍