Questionnaire Builder

Use IBM Data Risk Manager Questionnaire Builder function to create and manage questionnaires that are necessary to perform assessments.

Questionnaires

Questionnaires are created for gathering user responses to assess readiness or understand maturity of controls. Use the IBM Data Risk Manager assessment questionnaires to define and associate context flows required for evidence collection and delegation, and to capture context attributes such as priority, significance, relevance, and applicability. Questions can be associated with multiple controls. Depending on the type of responses expected for a question, appropriate question type is created and configured. For the steps on how to create questionnaire, see Creating a question.

Importing questionnaire data

You can also import a predefined questionnaire for use in the assessment. Data is defined for assessment questionnaire, response type, and registry in a comma-separated value (CSV) file, which you can import into IBM Data Risk Manager. For more information about how to import questionnaire data, see Importing assessment questionnaire, response type, and registry as CSV file.

Decision tree

Responses to some questions lead to further questions. You can express this relationship by creating a conditional relationship between questions. In a conditional relationship, there is a parent question and a child question. The child question is, by default, not displayed. The child question is displayed only when an enabling response is provided to the parent question. By using the decision tree, you can quickly view and identify the relationships between the questions.

Decision tree is a hierarchical structure that consists nodes and directed edges. A decision tree typically starts with a single node (parent question), which branches (child questions) into possible outcomes. Each of those outcomes can lead to additional nodes, which branch off into other possibilities. By using a decision tree, you can easily explain the decisions, identify possible events that might occur, and see potential outcomes.