Questions are the bank Planning and ad-hoc audits draw from. An inactive question stays in the bank and is counted separately on the overview. Search by ID, standard, domain, or the question text.
What a question holds
- Question text, and a status such as active.
- Standard, for example 27001 or 27002.
- Clause / control ref, which the table can sort as the ID.
- Domain and sub domain, so plans can keep a theme together.
- An optional topic.
Import sample questions
On Questions, import sample seed questions for one or more frameworks: ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, Cyber Essentials, ISO 9001, SOC 1, and SOC 2. Questions are organised by clause or control. Importing again does not duplicate a question that is already in the bank from that seed.
You can also import questions from a CSV file. After import, edit or delete any row. Sort the table by ID, standard, domain, sub domain, or status.
Questions that belong together
Sample questions are often a pair: one asks whether the requirement is defined, and the next asks whether it is operating and evidenced. The operating question cites the defined one. Planning keeps a question and any question it cites on the same audit.