About Control Assessments

Overview

You can use the Assess Control assessment question type to add attribute questions that capture information about control implementations. This feature allows you to assess the controls of a single inventory or assess all common controls against a group of assets, processing activities, or risks.



The Attribute questions will relate to the controls on risk and inventory records and can be added in bulk if needed. For more information on adding Assess Control and Attribute questions on an assessment, see Configuring Templates for Control Assessments.

Business Use Case

This feature allows you to complete control self-assessments. You can capture information about existing control implementations from the assessment to view how controls are handled by your organization. While assessing existing controls, you can review and update control information as needed by editing the assessment fields.

You have the ability to assess a single control through a self-assessment. To assess multiple controls, you can launch a single assessment on all selected controls or launch one assessment per selected control.

Launching Control Assessments

Once a template is configured and published using the Assess Control and Attribute question types, you can use the published template to launch an assessment. These assessments can be launched from the IT & Security Risk Management module in the following locations:

  • Control Self-Assessment

  • Control tab of the Inventory Details screen

  • Controls list screen

For more information on launching control assessments from multiple launch points, see Launching Control Assessments.

Reporting on Published Templates

You have the ability to create and export various reports that display the Assess Control and Control Attribute question types.

You can build and export column or PDF reports of the control assessment that will include control question and attribute question responses.

When creating a custom column PIA & DPIA Automation report, you can manage the columns using the column selector to include the Assess Control question and Control Attribute questions.