Form you must fill out that is used to evaluate risk level of system before deployment.

  • Yes/no questions
  • Point-score system sums risk score
  • Few short-answer questions

Seen as just a legal requirement, to be compliant.