Responding to a Requirement-Based Assessment

Learn how to respond to a Requirement-Based Assessment (RBA)

Once the assessment has been published, you can now assess each of the controls/provisions, now as requirements in the Requirement-Based Assessment (RBA). For each of the requirements, you will be able to add information to each of the defined fields that were created during the creation phase of the assessment.

Table of contents

1. Responding to fields
2. Notes & guidance
3. Attachments
4. Control responsibilities
5. Risks and issues
6. Filtering
7. Submitting the assessment
8. Reopening a completed RBA

Responding to fields

Find your RBA response by either going to the Response-1 tab within a published RBA, or going to the Responses tab and clicking on + Add response to create Response-1.

To assess a requirement, click on it and the side panel will display the fields you have added.

For each of the defined fields, select from the dropdown options, or enter text depending on the field type. As you fill in the fields, the requirements table is dynamically updated.

Any additional information which forms the requirement can be accessed through the tab Requirement details.

While responding to the assessment, you can also hide fields in the requirements table. To do this, click on the eye to the right of the field's name in the side panel. You can hide multiple columns at once.

You can also bulk respond by bulk selecting requirements and then choosing the responses to apply to all requirements.

Notes & guidance

If a requirement has notes or guidance linked to it, the notes icon will be displayed in the requirements table. You can view notes and guidance for a requirement by selecting the Notes & guidance tab in the side panel.

Attachments

If a requirement has attachments linked to it, the attachments icon will be displayed in the requirements table. These attachments may have been uploaded to the requirements when the assessment was being made.

You can download attachments from the Attachments section in the side panel.

To see any attachments, click on the Action button (3 dots to the right) and then select Download.

Attachments can also be added to requirements when completing the assessment, by clicking + in the Attachments section of the side panel.

The documents will appear in the Attachments section.

You can also bulk add attachments by selecting requirements and adding attachments.

Control responsibilities

If a requirement is linked to a control and its responsibility, you can see the responsibility and its tasks from within the assessment. To learn more, head here.

Risks and issues

You can also add risks, risk treatment plans, issues, and issue actions to requirements while responding.

To learn how to add risks and risk treatment plans, head here.

To learn how to add issues and issue actions, head here.

You may find recommended risks and issues while responding; this is done via automations and streamlines the response process. Hailey can also help with suggesting risks and issues from your register, or coming up with new risks and issues.

You can also bulk add risks, risk treatment plans, issues, and issue actions by bulk selecting requirements and adding performing these actions.

Filtering

You can use the filters to filter by requirement details as well as your responses.

Click on More filters to view all the filters.

Submitting the assessment

When you are done, click Submit at the bottom right of the screen.

Reopening a completed RBA

After an RBA is submitted, and its status is Completed, you can edit the response.

Head to Responses and clicking on the 3 dots to the right of the response, then select Edit.

You can also delete this response by selecting Delete.

This will allow you to create a new response.