If you’re using a well-known assessment framework, then SaltyCloud will prepopulate your instance of Isora GRC with some default question lists. You can also create them yourself. A question list has a single target type (org unit, app or vendor). If you want to use the same list of questions to assess different types of targets, then you will need to create separate question lists for the different target types. Like everything in the Setup area, only superusers can work with question lists.
On the Setup area of the Settings page, question lists are found in the Lists tab under Question Configuration.
When you create a new question list, all of the existing categories come up, along with all of their questions nested underneath. Click the checkboxes to choose which questions to include. If you choose a category, all of the questions under that category will be selected, speeding up the process.
In the Add/Edit Question List dialog, you can assign or edit the name, choose the target type, and select which questions to include. See also: How-To: Create a New Question List (Questionnaire Template) .
Questions in a question list are grouped by category. Within each category, they are ordered alphabetically. For more details, see FAQ: What determines the ordering of questions? .
See also: Reference: Working With Answer Choices Reference: Working With Questions