A questionnaire gathers information from users about a particular entity for specific risks and controls. The system provides a single copy of the questionnaire. When multiple users evaluate the same entity-subcontrol or entity-risk pair, the system saves the most recent entered answer.
Some answers are provided automatically because they are linked to other questionnaires where a user has already answered questions on similar controls.