In addition to enabling the option on the program wizard, you must ensure that the following checklist is in place if you decide to notify stakeholders only when there are questionnaires to answer.
- Ensure that a control target profile with appropriate target selection criteria is available, or create a new control target profile with a target selection criteria that will make sense while assessing your entities. For example, create a control target profile with the target selection criteria "entity severity equals to low" to assess only entities that have a low criticality.
- Determine the controls that need to be associated with the control target profile.
- Create a program using the content which has a control target profile attached to it.
- Create assessments for entities that match the control target profile settings and for entities that do not match the control target profile settings.
