1. Home
  2. Knowledge Base
  3. Create a new global assessment template (for auditors)

Create a new global assessment template (for auditors)

Here you create a new assessment template that you can use to run multiple projects on multiple partitions/clients using the same template, that only needs to be created once….

Create new template

Click on “+Create assessment template” in the upper right corner if you want to create a new one. (You can also edit existing ones by clicking on the pencil-button for each existing template.

Write the name of the Assessment-template in the “Name” field. – And describe the purpose of the assessment template or which types of clients you want to use it for (this field is for internal use).

Choose the Global Assessment type if you want to create an audit assessment (or another assessment that does not need be in context of a specific System, Process, Activity or Contract.)

Press “Save”.

Edit existing template

To start creating tasks in the template, you must find the new template in the front page of assessment templates, and click on the template-name to open and edit the template.

Description

When you edit your template, the first sheet you are met with is Basic info, where you can insert your own description of the assessment template, e.g. “This assessment template is used for all medium size clients (xxx-xx amount of employees) that wants a ISAE3000 audit” or you could choose to state a more external text such as:

“This revised assurance standard deals with assurance engagements other than audits or reviews of historical financial information. In revising ISAE 3000, the ……”

Include measure mapping (system description examples)

Here, you can choose whether you want this template to include measure mapping or not. If you choose “Yes” to this question, the template will include specific tasks regarding the system description chapter. This allows you to send out an example of system description (descriptions of security measures in the organisation), which the client can see as an example, edit into their own words or replace with their own formally descriptions altogether and send in as a task to the assessment responsibles. Later on the auditor can extract the client’s answers regarding this directly to the end report.

Upload Report Template

Assessment tasks

On the Questionnaire sheet you can create your assessment tasks for the template.

How to create new assessment tasks

Click on the green “+create new assessment task” button in the upper right corner to create a new task in the template.

In the first overlay, fill out the basic info of the first task.

First, write the title of the task, which is what is also presented to the client.

Next, you can type in a reference such as a unique number for this task, that you can reference to in the end-report as well. This field is not mandatory.

Then, choose a category for the specific task. The purpose of dividing tasks into categories is to make a long list of tasks more easy to read, but also to give you more reporting options.

Create new Categories

You can create new task categories by clicking on the “+” button to right of the drop down box. Write a Name and Description. The description field is not mandatory, but may be useful to extract in in the report later on if you think this is relevant.

Framework controls

In the next step of the creation of the assessment task, you have the option to relate the task to one or more framework controls. This requires that you have uploaded or created any Frameworks in Settings here.

The purpose of relating an assessment task to framework controls is, that you report on the status of implementation of one or many frameworks at the same time.

Documentation collection task

Next, Choose if you want to include “documentation collection” in this assessment task. Documentation collection in this context means that you add “first step”, which is a specific task directed to the end-client, where they are asked to describe a specific control (e.g. Ensure instruction data processor) and where the end-client can upload the formally described policy or procedure they have in place for this control.

If you answer “No” to Documentation task and click “Next”, you will only create a Auditor assessment task to be performed by the auditor.

If you answer “Yes” to Documentation task, the overlay will expand, for you to design the documentation task in question. See the example below.

The documentation collection task description is what is presented to the client.

You can choose to upload a document, that will be included in the documentation task. This could be an example of a procedure or a guideline you want to include. It is not mandatory to include a document in the task.

In the Allow comments dropdown box, you must choose if it should be optional or mandatory for the client to fill out the control description field.

See the userguide for Documentation collection task, for an example of how this task looks from the receivers (end-client) perspective.

Assessment task

In this step of the assessment task creation, you can define the audit task directed to the auditor (or the one performing this assessment).

In the Task Description field, you may write the question that this task should be based on. See an example below on the area of Data Processor controls.

You can upload a document that the auditor should receive. This could be a guideline of how to test, interview or assess this audit control. It is not mandatory to upload any documents here.

Allow Response, refers to …….

Allow Notes, refers to a field in the audit task with the purpose for internal notes, that are not meant to be extracted to the end-report.

Allow control description, refers to the field where the end-client’s own description of the control is written (or copied from the documentation collection task.)

Allow performed test: Choose optional or mandatory if you want to include a field to document any tests related to this audit task. Choose No if you want to exclude this field entirely.

Allow conclusion Choose optional or mandatory if you want to include a field to document conclusions related to this audit task. Choose No if you want to exclude this field entirely.

Allow attachments: Choose optional or mandatory if you want the auditor to be able to attach documentation related to this audit task. Choose No if you want to exclude this option entirely.

See the userguide for Perform Assessment task, for an example of how this task looks from the performing auditors perspective.

Complete the assessment Task

Finish the task by clicking save, and your task will appear on the questionnaire sheet of your assessment template.

Note that you can change the order of the tasks by using the drag and drop functionality.

Was this article helpful?

Need Support?

Can't find the answer you're looking for?
Contact Support

Want to hear more?

Let's talk about how our experience and software can help your company.