Manually add a control objective to a question

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read
  • If you’re using both Policy and Compliance Management and Third-party Risk Management, you can associate control objectives and controls with questions. Controls can be marked as compliant or non-compliant based on the response to the question.

    Before you begin

    Role required: sn_compliance.manager and sn_vdr_risk_asmt.vendor_risk_manager to associate control objectives in the Vendor Management Workspace.

    About this task

    Control objectives are authored and managed in Policy and Compliance Management and can be associated with questions used in assessments.

    A control objective is an objective, direction, or standard that acts as guidance for company interactions and operations. Control objectives can be categorized, classified, and related to policies.

    For more information on creating policies in Policy and Compliance Management, see Create a policy.

    To understand the difference between a control objective and a control, see Structural overview of Policy and Compliance Management.

    Note:
    Although it is not possible to directly map control objectives to questions in SAE questionnaires, SAE provides the capability to flag controls as compliant or non-compliant through post-assessment actions.

    Procedure

    1. Navigate to All > Third-party Risk Management > Assessment Setup > Questionnaire Templates and select the questionnaire template you want.
    2. Select the metric categories that you want from the related list and then select the question you want.
    3. Navigate to the Control Objectives related list and associate an existing control objective by selecting New.
    4. On the form, fill in the fields.
      For descriptions of all these fields, see Control objectives form.
    5. Select Submit.
      For more information on managing controls, see Manage controls.

      The control objective is associated with the question and all related lists are visible.