# Audits, applications, projects and activity criticality

Match the scope and questionnaire to the assessed subject.

> **Access:** assessment creation. Subject to enabled modules and your plan.

## Choose the scope

These workflows are available from their lists under **Reviews**. You need assessment-creation permission and access to the relevant subjects and questionnaires.

### Application or project assessment

1. Open **Application assessments** or **Project assessments**, then start creation. From an application or project record, **Assess** opens the same wizard with the subject already chosen.
2. Select the application or project to examine (step hidden if the subject is already chosen).
3. **Information**, then **Questionnaires**.
4. **Reviewers** (optional): appoint the people or teams who will validate completed questionnaires. Entity administrators can also review them; with no appointed reviewer, only they can.
5. **Collaborators**: check access before finishing.

The subject must exist under **Registers → Applications** or **Registers → Projects**. The assessment details show the **Assessed item** with a **View record** link. See [Applications](https://docs.cisapp.eu/en/registers/applications) and [Projects and launch decision](https://docs.cisapp.eu/en/registers/projects). These screens may still show French or untranslated labels in the English interface.

### Activity criticality

Open **Business Criticality** and choose the business activity. Use a questionnaire designed for criticality, then check information and access. This assessment qualifies an activity; it does not replace a vendor security assessment.

### Compliance audit

Open **Compliance Audits**. Define the context, choose the offered framework and useful questionnaires, then assign access before confirming. Prepare the evidence needed to support responses.

## Review results

Open the created assessment from its list. Check that questionnaires, subject and authorized people match the agreed scope. See [Read results](https://docs.cisapp.eu/en/assessments/results).

## Common difficulties

A missing subject needs to be created or shared in its register. A questionnaire intended for another purpose may not be offered. If you cannot create an assessment, check creation permission with your administrator.