Assign a checklist from the audit catalog

Only once a checklist is assigned does an inspection item carry the requirements that are answered during the audit. After the assignment, preeco automatically creates an answer entry for every requirement, so you can work through your ISMS framework along ISO 27001, BSI IT baseline protection or CISIS12 directly on the object.

Prerequisites

• You have access to the audit via the organisation assignment or via the “All organisations” setting.
• An “Audit catalog” is already assigned to the audit — otherwise no inspection object types, applicability levels and checklists are available.
• You have permission to edit audits.
• “Inspection object type” and “Applicability” are maintained on the inspection item — this combination determines which checklists are offered at all.

Assign checklists from the audit catalog

1. Open the detail view of the inspection item: in the “Inspection items” section of the audit detail page, click the designation of the inspection item.
2. In the “Checklists” section, click “Assign from audit catalogue” at the top right. A “Load from checklists” page view opens, showing the checklists that match the combination of “Inspection object type” and “Applicability”.
3. Select the checklists you want to assign using the selection boxes — for example B3.010: General requirements for applications.
4. Click “Apply checklists” at the bottom right.
5. Check the result in the “Checklists” section: every applied checklist appears with its “Designation” and a “Status” progress bar across all of its requirements. For each requirement, an answer entry with the status “Not processed” is created automatically, which you will find in the “Requirements” section.

Remove the assignment of a checklist

1. In the “Checklists” section of the inspection item, select the checklist to be removed using the selection box. You can select several checklists at once.
2. Click “Actions” at the top right and select “Remove assignment”.
3. Confirm the security prompt “Do you want to remove the assignment?” with “Yes, remove assignment”.

The checklist is removed from the inspection item together with all associated answer entries. Please note: any answers already entered will be lost. Both operations are logged in the audit's activity history.

Practical tip: initially apply only the checklists with the applicability “Relevance: MUST”. Only after all MUST requirements have been answered should you add SHOULD and CAN lists. This approach follows the logic of common methodologies (BSI IT baseline protection, CISIS12, ISO 27001) and ensures that mandatory requirements are addressed as a priority.