---
sourceDocument: Australia Enterprise Architecture (formerly Application Portfolio Management)
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/application-portfolio-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Enterprise Architecture (formerly Application Portfolio Management)

ft:clusterId :

    - appportman

bundleId :

    - appportman

workflow :

    - Technology


---

# Assessment form for risk and control information

# Assessment form for risk and control information {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

Risk managers use assessment forms to gather information about an application's risks
and controls. System administrators must make the forms accessible through the business
application so that application managers can respond.

Questionnaires initiated by risk managers are the basis for assessment forms sent to
application managers to collect risk or control details about their applications. For information
for risk managers about how to configure the business application form, see [Configure the business application form for
risk management](https://servicenow-prod.fluidtopics.net/HAq6loyBJnMIkpSyHYA9iQ "Configure the business application form to enable application managers to provide risk and control information associated with a business application through a risk assessment questionnaire or a control attestation survey.").

For information for application managers about how to respond to the questionnaire, see the
[Respond to a risk assessment questionnaire](https://servicenow-prod.fluidtopics.net/~E1pox69jQovEdCnlQF3Hg "Respond to a risk questionnaire to provide risk-related information for your business application to a risk manager.")
and [Take the control attestation survey](https://servicenow-prod.fluidtopics.net/GTjp1_8tRVxl0XI9F5Y1xw "Return the control attestation survey to provide information to verify that a control is implemented for a business application.") topics.