Assessment form for risk and control information

Risk managers use assessment forms to gather information about an application's risks and controls. System administrators must make the forms accessible through the business application so that application managers can respond.

Questionnaires initiated by risk managers are the basis for assessment forms sent to application managers to collect risk or control details about their applications. For information for risk managers about how to configure the business application form, see Configure the business application form for risk management.

For information for application managers about how to respond to the questionnaire, see the Respond to a risk assessment questionnaire and Take the control attestation survey topics.