Select a framework: the form asks its own questions, requirement by requirement. You receive your responses, what is missing, what may not apply and the follow-up questions. It collects information and supports assessment; it does not independently certify legal compliance.
Contents
1. Assessment Information
2. Organization Overview
3. Assessment Scope and Methodology
4. Selected Framework and Applicable Requirements
5. Questionnaire Overview
6. Organizational and Governance Requirements
7. Framework-Specific Assessment Sections
8. Requirement-by-Requirement Questions
9. Responses and Implementation Status
10. Supporting Evidence References
11. Identified Missing Information
12. Potential Non-Applicable Requirements
13. Preliminary Compliance Observations
14. Areas Requiring Further Investigation
15. Assessment Summary
16. Review and Approval
17. Document Version History
What you provide
Framework — Selecting a framework changes the questions, their references and the fields asked.
Assessment information — Who assesses what, and why.
Organizational context — What the questions and observations are read against.
Assessment preferences — They set which questions are asked below.
Framework questions — One question per requirement, with its reference. Answer what you know: what stays open is listed in the deliverable.
