Assessment Details

Opening an assessment shows a full-width panel where privacy analysts, security assessors, and the coordinators who own the assessment do the detailed work. The header carries the assessment number, status chip, type, priority, due date, days remaining, and a Discussion button; the content is organized into tabs.

Overview Tab

The main column carries:

• The compact lifecycle rail — Active → In Review → In Effect → Closed. In Review is skipped when no review workflow ran.
• The editable Description section — title and description, with optional per-language translations.
• Custom fields configured for assessments.
• The Commitments card — the "privacy promises" register of measures, conditions, and undertakings tracked to completion. See Commitments.

The sidebar holds:

• Status — change to another status within the current stage. Cross-stage moves happen through actions like starting a review, not a manual button. Priority is set here too.
• Screening — the screener determination, if one ran. It is excluded from the exported report.
• Key dates — created, due date (editable), next review, and the optional submitted to regulator date. Elapsed and remaining days are computed; once In Effect the countdown targets the next review date.
• Hours — log and track effort against estimate.
• Assigned owners — coordinator and senior official.
• Linked entities and reference links.

Click the subject name to open its detail — read-only from here, because subjects are managed in the Subjects directory.

(screenshot placeholder — capture: the Overview tab with the lifecycle rail, Description section, Commitments card, and the sidebar Status/Key dates/Hours cards)

Sections Tab

The Sections tab is the questionnaire filler — a left rail of sections with typed questions. If the questionnaire was customized, a provenance banner names the source template and version. Holders of the right permission get an Edit questionnaire entry point — or Customize while the assessment is still in the Active stage — that opens the template builder on the assessment's own copy without touching the shared template.

(screenshot placeholder — capture: the Sections tab with the section left rail, typed questions, and a provenance banner on a customized questionnaire)

Risks Tab

The assessment's risk register, scored on 5-point Likelihood × Impact, with the effective overall-risk override and, for types that enable it, the harm-to-individuals (RROSH) determination. Risks can carry mitigation tasks and discussions. See Risk Details.

Assignments Tab

Section delegations — handing a questionnaire section to a subject-matter expert. The tab is shown to users who can assign. See Assessment Delegations.

Documents Tab

A reference-document workspace for every assessment. For Security (SEC) assessments, generate-SSP/SAR actions appear, alongside extra SEC-only tabs: Categorization, Controls, POA&M, and ATO.

Review Tab

The configurable review/approval stepper on the assessment. Starting a review moves the assessment to In Review; a reviewer holding the review-act permission can approve here even without modify rights.

Closure Tab

Guides the In Effect / Closure lifecycle, collaborators, the regulator summary, and document export. View in Documents jumps to the generated report's preview.

Activity Tab

The full assessment timeline.

Frozen Records and Re-assess

Once an assessment is In Effect (approved) or Closed, its content is read-only. Changes go forward through Re-assess, which starts a fresh assessment on the same subject — see Creating Assessments. Status advancement (for example In Effect → Closed) stays available to holders of that permission.