This blog post showcases, step-by-step, how to edit or add a control in an assessment in the Findings platform.
Step 1 – Find ‘Manage Assessments’ #
Go toward the top right of the screen and click the ‘Manage Assessments’ button.
Step 2 – Click ‘Manage’ within ‘MANAGE ASSESSMENTS’ #
After clicking ‘Manage Assessments,’ the ‘MANAGE ASSESSMENTS’ box will appear. It contains two tabs: ‘Assign’ and ‘Manage.’ Click ‘Manage.’
Then, a list of assessments will appear. Go to the relevant assessment (for example ‘Practice Assessment’ in the screenshot below) and click the ‘Edit’ button to edit the assessment.
Step 3 – Editing the Assessment #
After clicking ‘Edit,’ the ‘Assessment template’ will appear. Under ‘ASSESSMENT,’ you will see the categories that you created for the assessment. In the example below, the categories are:
- ‘User and Company Profile’;
- ‘Cyber Security’; and
- ‘Third Parties.’
To add a control to a category, click the pencil-notepad icon, the first of the three icons, under the ‘Actions’ header.
Step 4 – Adding & Editing a New Control #
After clicking the pencil-notepad icon, the ‘CONTROLS LIST’ box will appear (for example, the ‘CONTROLS LIST: CYBER SECURITY’ box in the screenshot below). The ‘CONTROLS LIST’ box will contain the list of the controls (questions) you created for the assessment.
To add a new control (question), go to the top left corner and click the ‘New control’ tab.
Subsequently, the ‘NEW CONTROL’ box will appear. In the relevant (and only) bar (that says ‘Type control name’), type the control/question you want to add to the assessment.
So, for example, let’s type the control/question: ‘Do you perform regular tests on your cyber security system?’. After typing this, another box will appear in the middle of the ‘NEW CONTROL’ box, called ‘ANSWER TYPES BROWSER.’ Within that box is a red ‘Browse types’ button. Click the ‘Browse types’ button.
Subsequently, the ‘ANSWER TYPES’ box will appear, containing seven options:
- ‘Input’;
- ‘TextArea’;
- ‘RadioGroup’;
- ‘Checkbox’;
- ‘DropDown’;
- ‘MultiSelect’; and
- ‘FileUpload.’
Select the option that will enable the assessee to answer the control/question in the most efficient and applicable way. You can select any of the seven options. However, for the purposes of this example (based on the question, ‘Do you perform regular tests on your cyber security system?’), we shall select ‘RadioGroup.’
After clicking ‘RadioGroup,’ a red plus icon along with the words, ‘Add new type,’ will appear on the left side. Under that will be a list of options. Click the option that is most appropriate for the control/question.
For example, click ‘Yes, No.’ (Alternatively, if you have no options, or if the options are not applicable or satisfactory for the question, click ‘Add new type’ to create a new option.)
Then, click the green ‘SAVE’ button in the bottom right corner. (However, if you want to add weights to your options, click the scroll down menu on the ‘Weight’ tabs and select the weights for the answers before clicking ‘SAVE.’)
Subsequently, the ‘NEW CONTROL’ box will reappear. However, this time, it will contain two new headers:
- ‘Selected answer type’ (based on the answer type you selected for the control/question, such as ‘RadioGroup’); and
- ‘Select triggers.’
Assuming you are satisfied with the answer type you selected and don’t want to add a trigger, click the green ‘SAVE’ button. (If you wish to add a trigger, and a control to the trigger, go to Step 4a below.)
After clicking ‘Save,’ the ‘CONTROLS LIST’ box will reappear, containing your list of controls. The control you just added will appear at the bottom of the list (as circled below).
What if I Made a Mistake whilst Adding a Control? #
To amend a spelling or grammatical mistake, click the pencil-notepad icon. This is located in the bottom right corner of the added control.
Subsequently, a new box will appear with the new control as its title; for example, ‘DO YOU PERFORM REGULAR TESTS ON YOUR CYBER SECURITY SYSTEM?’. (Please note, the box’s title will appear in capital letters even if you did not write the control in capital letters.)
Under the title is the ‘Type control name’ bar again. However, this time, it will contain the question/control you wrote in place of ‘Type control name’ (again, for example, ‘Do you perform regular tests on your cyber security system?’). In this bar, you can edit the control/question to put right any spelling or grammatical error(s).
Once you have amended the control, click the green ‘SAVE’ button. Subsequently, the control will appear in the ‘CONTROLS LIST’ in its amended form.
What if I Added the Control in the Wrong Category? #
If you added the control in the wrong category, you must remove the control and repeat Step 4 of this document. Then, add the control to the right category.
To remove a control, check/tick the box to the left of the control in ‘CONTROLS LIST.’
Subsequently, the three dots above the list (to the right of the ‘New control’ and ‘Use suggestions for all’ tabs) will become highlighted in a darker grey, Moreover, the highlighted circular-rectangular shape will contain a number (which reflects how many controls you want to remove). Click the highlighted dots.
Subsequently, a scroll down menu will appear, containing four options:
- ‘Use suggestions,’
- ‘Change answer type,’
- ‘Remove selected’; and
- ‘Collaborate.’
Click ‘Remove Selected,’ the third option.
After clicking ‘Remove selected,’ a ‘CONFIRMATION’ box will appear over the ‘CONTROLS LIST’ box. It will ask: ‘Do you want to remove all selected controls?’. If you want to delete the control, click the green ‘Yes’ button.
Then, the control will be removed from the CONTROLS LIST.
Step 4a – How to Add a Trigger? #
A trigger is a follow up question that arises (or, rather, is triggered) after selecting a straightforward, choice answer, such as yes or no.
This step may be optional and only applies after selecting straightforward, choice answers in the answer types:
- ‘RadioGroup’;
- ‘Checkbox’;
- ‘Dropdown’; and
- ‘MultiSelect.’
To add a trigger to a control, return to the ‘CONTROLS LIST’ box and click the pencil-notepad icon to the control you previously added. (For example, ‘Do you perform regular tests on your cyber security system?’.)
Subsequently, the box to edit the control will reappear. It will contain two subheadings: ‘Selected answer type’ and ‘Select triggers.’ Under ‘Select triggers,’ there is a red ‘Find trigger’ button. Click the ‘Find trigger’ button.
Subsequently, the ‘TRIGGERS BROWSER’ box will appear. You must click the answer you want the trigger for. For example, let’s click ‘Yes’ (to the control/question, ‘Do you perform regular tests on your cyber security system?’).
Next, you must select the category for the trigger (from the list you created when you built the assessment). For example, out of the three categories we created in our assessment (‘User and Company Profile,’ ‘Cyber Security,’ and ‘Third Parties’), we shall select ‘Cyber Security.’ Then, the (triggered) added control will be part of the same category as the master control.
Subsequently, a red plus icon-‘Add New Control’ tab will appear under the categories and above the controls/questions that you already created for the assessment. Click the plus icon-‘Add New Control’ tab.
Subsequently, another box, titled according to your question/control, will appear. In the box under the title, there will be a bar (called ‘Type control name,’ like earlier) where you must type a follow up question/control.
After typing the question/control into the bar (for example, ‘How often do you perform tests on your cyber security system?’), the red ‘Browse types’ button will appear again and you must repeat a similar process as Step 4 above. Thus, you must select an answer type from one of the seven options (‘TextArea,’ ‘RadioGroup,’ ‘File Upload,’ etc…).
After clicking ‘Browse types’ and selecting the answer type (in this case, TextArea), click the green ‘SAVE’ button.
Then, the ‘TRIGGERS BROWSER’ box will reappear. However, this time, the new control for the trigger will be added to the bottom of the list.
Subsequently, click the new control for the trigger at the bottom of the list and it will be highlighted in dark blue. Then, click the green ‘SAVE’ button.
Subsequently, the edit control box will reappear. However, this time, you will be able to see the number of triggers you’ve created for the control (you can create as many as you need). If you are satisfied with the number of triggers you have created, click the green ‘SAVE’ button.
The triggered new control will be located at the bottom of the ‘CONTROLS LIST’ for the category. If you place the mouse over the eye/reveal icon of the triggered new control, the master control will be highlighted. Then, you can identify which control the triggered new control belongs to.
