Assessments

Assessments are mainly used for documenting data processing, and assessing its compliance and risks. In the case of assessing compliance and risks, an assessment can be a process, service, product, or a processing activity.

In some cases, assessments may also be used for ‘data mapping’, in which case an assessment can be a larger entity such as an organization, subsidiary, department, team, data register or a system.

Create a root assessment

1. From the top navigation bar go to the assessments list.

Note

Initially there are no assessments available.

2. Click + Create assessment to open the assessment creation form.

3. Name the assessment and select Organization as the assessment group for the root assessment.

4. Click Create & open, and you will be redirected inside the new assessment.

Note

The form also contains the Show asset controls, Show asset risks, Assessment criteria and Status fields. Assessments in Draft status are excluded from data summaries and the Article 30 report, while assessments that are In progress or Ready are included in them.

Tip

Editing an existing instance’s text fields (such as assessment name and description) will only be saved in the displayed language. Language can be changed from the user menu in the top-right corner.

Create a sub-assessment

5. Navigate back to assessments by clicking the Assessments breadcrumb.

6. Create another assessment by clicking + Create assessment.

7. Specify the assessment info as in the previous assessment and assign the previously created assessment as the parent assessment.

8. To create the sub-assessment and return to the assessments list, click Create & exit.

Note

In the assessments list view there are now 2 assessments, where Company Inc. is the root assessment and Customer Support is the sub-assessment.