Attached is the assessment template for bulk upload.

Instructions:

Step 1: In the Cover tab, fill out the below content:

Name - name of the assessment template.

Type - choose from CUSTOM or BIA. CUSTOM type is for risk or control assessment. BIA type is for impact scoring for the asset. The latest BIA assessment will give you the Asset's Impact Score and Rating. 

Scope - this text will show up in the PDF report in section 1, Assessment Scope, when you export an assessment performed on this template. 

Step 2: In the Question tab, fill out the below content:

sectionName - this is the name of the section. When you have findings for each question, the system will automatically group all issues by section so you can see the chart in the Assessment > Summary tab for issues by section name. 

contentSource - this is a reference for your question. The content source value will show up in the questionnaire as a tab for each question. 

relationship - insert "p" for parent or "c" for child question. All question will be displayed in the order of the question list from top to bottom. 

questionType - insert one of the supported answer type. To get a automatic risk score, you should use LIST or CHECKBOX. All questionType value should be in all CAPS. 

• LIST
• CHECKBOX
• TEXTAREA
• DATE
• NUMBER
• CURRENCY

listValue - if your questionType is a LIST or CHECKBOX, you will need to fill out the list values in the List Values subtab. Reference the listValue that you want assigned to each question. 

questionText - this is the text of the question. System supports up to 2,000 characters.  

required - insert TRUE or FALSE value in all CAPS. All required fields must be answer before recipients can submit their responses. 

finding_name - if you choose a LIST or CHECKBOX questionType, you can complete the finding info for create bulk finding feature. Finding name is the name of the finding. 

finding_description - describe the finding. 

recommendation - recommendation to mitigate the finding. 

helpText - this text will go below each question to provide custom help text to answer each question. System supports up to 2,000 characters.  

Step 3: List Values tab. If your questionType is a LIST or CHECKBOX, then you will need to specify the values and properties for the assessment template. 

listValue - this is the name of each list you want to use for your question. You will insert this value in the Question tab > listValue field. 

Label - this is the label value the user will select for their answers. 

value - this is a system name. We support camelCase character. See instructions on camelCase text structure:  https://en.wikipedia.org/wiki/Camel_case

riskScore - insert the desire risk score to reflect each answer value. 

commentRequired - insert TRUE or FALSE to require comments.

attachmentRequired - insert TRUE or FALSE to require attachments.

displayChild - insert TRUE or FALSE to display the child question. If TRUE, you must have child question to display or else the upload of the template will fail validation. 

createFinding - insert TRUE or FALSE to false which answer will have a finding created. This is used in the Create Bulk Finding feature where we detect your finding flags. 

priority - insert High, Medium, Low value option. This is required to create findings. 

daysDue - insert a whole number. This is used to calculate the finding Due Date when a finding is created. This is required to create findings. 

internalControlId - Insert the internal control id you want this question to associate with. You can insert multiple ids. See syntax example: 1234, 1234

riskRegisterId - Insert the risk register id you want this question to associate with. You can insert multiple ids. See syntax example: 1234, 1234

 controlLibraryId- Insert the control library id you want this question to associate with. You can insert multiple ids. See syntax example: 1234, 1234 

Step 4: How to get your template uploaded?

Finally, when your template is completed. Submit the template to CyberOne Support at support@c1risk.com. The import tool will be provided for admin to access in 2Q-3Q2022. In the meantime, submit your template and we can help you test!