Artifacts and templates
Assessment template titles
Browse Sorena AI assessment template titles and choose a questionnaire source for project work.
Use a Sorena Library template when you need a prepared set of assessment questions. Templates cover security, privacy, compliance, product requirements, sustainability, and risk management. The titles below were reviewed on 27 October 2026. The in-app library shows available versions and the choices your workspace can use.
Your workspace needs Platform and Assessment access to browse these templates. Creating an assessment also requires contribution access to its project. A questionnaire gives you questions to answer; your team's answers and supporting evidence determine the assessment's findings.
Choose an assessment source
- Open Projects, select a project, and choose New artifact > Assessment.
- In Assessment sources, choose Sorena Library.
- Search the template titles and use category filters to narrow the choices.
- Review the selected template and check Selected sources before continuing. If you combine templates or files, check whether you are adding to or replacing the source selection.
- Follow Create an assessment to review classification, sources, exclusions, and the final creation step.
Sorena recommends one template because several may have different structures. If you use more than one, inspect the resulting questions for overlap. Read a linked version using Read a library template version. Archived versions can explain existing assessments but are not active choices for new work.
Security
| Template title | Catalog category |
|---|---|
| APRA CPS 234 Information Security Assessment | Security/Information Security |
| Australian Smart Device Security Assessment | Security/Product Security |
| Brazil LGPD Information Security Assessment | Security/Information Security |
| Common Criteria Security Evaluation (ISO/IEC 15408 and ISO/IEC 18045) | Security/Security Evaluation |
| ETSI AI Cybersecurity Baseline Assessment | Security/Artificial Intelligence |
| ETSI Consumer IoT Security and Conformance Assessment | Security/Product Security |
| ETSI Home Gateway Security and Conformance Assessment | Security/Product Security |
| ETSI TS 103 815 V1.1.1 Smart Door Lock Security Supplement | Security/Product Security |
| ETSI TS 103 927 V1.1.1 Smart Voice-Controlled Device Security Overlay Assessment | Security/Product Security |
| EU Radio Equipment Cybersecurity Assessment | Security/Product Security |
| FIPS 140-3 Cryptographic Module Validation Assessment | Security/Security Evaluation |
| GSMA SGP.22 v2.6.1 Remote SIM Provisioning Assessment | Security/Product Security |
| ISO/IEC 27001:2022 ISMS Certification Readiness Assessment | Security/Information Security |
| ISO/IEC 27017:2015 Cloud Security Assessment | Security/Cloud Security |
| ISO/IEC 30111:2019 and ISO/IEC 29147:2018 Vulnerability Handling and Disclosure Assessment | Security/Vulnerability Management |
| UK PSTI Consumer Connectable Product Security Assessment | Security/Product Security |
Compliance
| Template title | Catalog category |
|---|---|
| 2023 China Compulsory Certification (CCC) Catalogue Screening Assessment | Compliance/Product Conformity |
| Australian Notifiable Data Breaches Assessment | Compliance/Privacy |
| Australian Ransomware Payment Reporting Readiness Assessment | Compliance/Cybersecurity |
| Brazil LGPD Comprehensive Assessment | Compliance/Privacy |
| Brazil LGPD Cookies and Tracking Assessment | Compliance/Privacy |
| Brazil LGPD Data Protection Impact Report (RIPD) | Compliance/Privacy |
| Brazil LGPD International Data Transfer Assessment | Compliance/Privacy |
| Brazil LGPD Legitimate Interest Assessment | Compliance/Privacy |
| Brazil LGPD Security Incident and ANPD Notification Assessment | Compliance/Privacy |
| California CCPA and CPRA Compliance Assessment | Compliance/Privacy |
| China 2400 MHz, 5100 MHz and 5800 MHz Radio Equipment Compliance Assessment | Compliance/Product Conformity |
| China Cross-Border Data Transfer Assessment | Compliance/Privacy |
| China Energy Label 2025 Consultation-Draft Readiness Assessment | Compliance/Product Conformity |
| China Micro-Power Short-Range Radio Equipment Compliance Assessment | Compliance/Product Conformity |
| China Mobile App Privacy, Necessary Information, Distribution, and Filing Assessment | Compliance/Privacy |
| China Mobile Smart-Terminal Preinstalled and Distributed App Compliance Assessment | Compliance/Privacy |
| China Personal Information Protection Law (中华人民共和国个人信息保护法) Comprehensive Assessment | Compliance/Privacy |
| China RoHS Restricted Substances Compliance Assessment | Compliance/Product Conformity |
| China Telecom Equipment Network-Access Licensing Assessment | Compliance/Product Conformity |
| Digital Product Passport Architecture Assessment | Compliance/Product Traceability |
| EN 301 549 V3.2.1 ICT Accessibility Assessment | Compliance/Accessibility |
| ESRS 2 General Disclosures Assessment | Compliance/Sustainability Reporting |
| ESRS Double Materiality Assessment | Compliance/Sustainability Reporting |
| ESRS E1 Climate Change Assessment | Compliance/Sustainability Reporting |
| ESRS E2 Pollution Assessment | Compliance/Sustainability Reporting |
| ESRS E3 Water and Marine Resources Assessment | Compliance/Sustainability Reporting |
| ESRS E4 Biodiversity and Ecosystems Assessment | Compliance/Sustainability Reporting |
| ESRS E5 Resource Use and Circular Economy Assessment | Compliance/Sustainability Reporting |
| ESRS G1 Business Conduct Assessment | Compliance/Sustainability Reporting |
| ESRS S1 Own Workforce Assessment | Compliance/Sustainability Reporting |
| ESRS S2 Value Chain Workers Assessment | Compliance/Sustainability Reporting |
| ESRS S3 Affected Communities Assessment | Compliance/Sustainability Reporting |
| ESRS S4 Consumers and End-users Assessment | Compliance/Sustainability Reporting |
| ESRS Value Chain Reporting Assessment | Compliance/Sustainability Reporting |
| ETSI Advanced Electronic Signatures, Seals and ASiC Assessment | Compliance/Digital Identity |
| ETSI AI Explainability and Transparency Assessment | Compliance/Artificial Intelligence |
| ETSI Certificate TSP and QTSP Assessment | Compliance/Digital Identity |
| ETSI Electronic Timestamping | Compliance/Digital Identity |
| ETSI NGSI-LD API Conformance Assessment | Compliance/Technical Conformance |
| ETSI Remote Signature Service Assessment | Compliance/Digital Identity |
| ETSI SmartM2M SAREF Reference Ontology Conformance Assessment | Compliance/Technical Conformance |
| ETSI Trust Service Provider Governance Assessment | Compliance/Digital Identity |
| ETSI UICC-Terminal Interface Conformance Assessment | Compliance/Technical Conformance |
| EU Accessibility Act Readiness Assessment | Compliance/Accessibility |
| EU AI Act GPAI Systemic Risk Assessment | Compliance/Artificial Intelligence |
| EU AI Act GPAI Transparency and Copyright Assessment | Compliance/Artificial Intelligence |
| EU AI Act Organizational Compliance Assessment | Compliance/Artificial Intelligence |
| EU Batteries Regulation Compliance Assessment | Compliance/Product Conformity |
| EU Battery Carbon Footprint Assessment | Compliance/Sustainability |
| EU Battery Passport | Compliance/Product Traceability |
| EU Battery Removability and Replaceability Assessment | Compliance/Product Conformity |
| EU Corporate Sustainability Due Diligence Directive Comprehensive Assessment | Compliance/Sustainability |
| EU CSRD Reporting Readiness Assessment | Compliance/Sustainability Reporting |
| EU Cyber Resilience Act Compliance Assessment | Compliance/Cybersecurity |
| EU Data Act Comprehensive Assessment | Compliance/Data Governance |
| EU Data Act Interoperability and Smart Contract Assessment | Compliance/Data Governance |
| EU Data Act Vehicle Data Access and Sharing Assessment | Compliance/Data Governance |
| EU Deforestation Regulation Due Diligence Assessment | Compliance/Supply Chain Due Diligence |
| EU Digital Identity Wallet Provider Assessment | Compliance/Digital Identity |
| EU Digital Identity Wallet Relying Party Assessment | Compliance/Digital Identity |
| EU Digital Markets Act Article 11 Compliance Reporting Assessment | Compliance/Digital Markets |
| EU Digital Markets Act Gatekeeper Obligations Assessment | Compliance/Digital Markets |
| EU Digital Services Act Independent Audit Assessment | Compliance/Digital Services |
| EU Digital Services Act Online Intermediary Assessment | Compliance/Digital Services |
| EU Digital Services Act Transparency Reporting Assessment | Compliance/Digital Services |
| EU DORA ICT Incident Classification and Reporting Assessment | Compliance/Incident Management |
| EU DSA Protection of Minors Assessment | Compliance/Digital Services |
| EU Ecodesign for Sustainable Products Regulation Product Compliance Assessment | Compliance/Product Conformity |
| EU EED Data Centre Energy Reporting Assessment | Compliance/Energy Management |
| EU eIDAS Long-Term Digital Preservation and Electronic Archiving Assessment | Compliance/Digital Identity |
| EU eIDAS Regulatory Compliance Assessment | Compliance/Digital Identity |
| EU EMC Product and Fixed-Installation Assessment | Compliance/Product Conformity |
| EU Energy Efficiency Directive Enterprise Energy Audit Assessment | Compliance/Energy Management |
| EU Environmental Claims Compliance Assessment | Compliance/Consumer Protection |
| EU ePrivacy Communications Confidentiality Assessment | Compliance/Privacy |
| EU ePrivacy Cookies and Tracking Assessment | Compliance/Privacy |
| EU ePrivacy Direct Marketing Assessment | Compliance/Privacy |
| EU GDPR Comprehensive Compliance Assessment | Compliance/Privacy |
| EU GDPR Controller-Processor and Joint-Controller Assessment | Compliance/Privacy |
| EU GDPR Data Protection Impact Assessment | Compliance/Privacy |
| EU GDPR International Transfers Assessment | Compliance/Privacy |
| EU GDPR Personal Data Breach Management and Notification Assessment | Compliance/Privacy |
| EU GDPR Records of Processing Activities Assessment | Compliance/Privacy |
| EU General Product Safety Regulation Economic Operator Assessment | Compliance/Product Safety |
| EU GPSR Online Marketplace Product Safety | Compliance/Product Safety |
| EU GPSR Product Recall Readiness | Compliance/Product Safety |
| EU GPSR Safety Gate and Safety Business Gateway Readiness | Compliance/Product Safety |
| EU Low Voltage Directive Conformity Assessment | Compliance/Product Conformity |
| EU Machinery Regulation Manufacturer Readiness Assessment | Compliance/Product Safety |
| EU Market Surveillance Authority Operations Assessment | Compliance/Product Safety |
| EU Market Surveillance Economic Operator and Article 4 Assessment | Compliance/Product Safety |
| EU MDR Annex XVI Non-Medical Products Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR Clinical Evaluation and Evidence Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR Legacy Device Transition Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR Manufacturer and General Safety and Performance Requirements Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR Medical Device Classification Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR Medical Device Software Qualification and Classification Assessment | Compliance/Product Conformity |
| EU MDR Post-Market Clinical Follow-up Plan Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR Summary of Safety and Clinical Performance Readiness Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU MDR UDI and Eudamed Registration Assessment | Compliance/Product Conformity; Compliance/Product Safety |
| EU Packaging and Packaging Waste Regulation Assessment | Compliance/Product Conformity; Compliance/Environmental |
| EU Proposed Green Claims Directive Readiness | Compliance/Consumer Protection |
| EU Radio Equipment Common Charger Assessment | Compliance/Product Conformity |
| EU Radio Equipment Directive Conformity Assessment | Compliance/Product Conformity |
| EU RoHS Restricted Substances and Conformity Assessment | Compliance/Product Conformity |
| EU Taxonomy Article 8 Turnover, CapEx and OpEx Disclosure Assessment | Compliance/Sustainability |
| EU Taxonomy Economic Activity Alignment Assessment | Compliance/Sustainability |
| EU Trusted List | Compliance/Digital Identity |
| EU Vehicle Equipment Electromagnetic Compatibility Assessment | Compliance/Product Conformity |
| EU Waste Battery Recovery Assessment | Compliance/Sustainability |
| FIPS 180-4 Secure Hash Algorithm Conformance Assessment | Compliance/Cryptography |
| FIPS 186-5 Digital Signature Standard Conformance Assessment | Compliance/Cryptography |
| FIPS 197 Advanced Encryption Standard (AES) Conformance Assessment | Compliance/Cryptography |
| FIPS 202 SHA-3 Conformance Assessment | Compliance/Cryptography |
| FIPS 203 ML-KEM Conformance Assessment | Compliance/Cryptography |
| FIPS 204 ML-DSA Conformance Assessment | Compliance/Cryptography |
| FIPS 205 SLH-DSA Conformance Assessment | Compliance/Cryptography |
| Forced Labour Due Diligence Assessment | Compliance/Human Rights |
| ISO/IEC 17025:2017 Laboratory Competence Assessment | Compliance/Conformity Assessment |
| ISO/IEC 17065:2012 Certification Bodies Assessment | Compliance/Conformity Assessment |
| ISO/IEC 42001:2023 AI Management System Readiness Assessment | Compliance/Artificial Intelligence |
| OECD Due Diligence Guidance for Responsible Business Conduct (2018) Assessment | Compliance/Responsible Business Conduct |
| OECD MNE Guidelines Responsible Business Conduct Due Diligence | Compliance/Human Rights; Compliance/Sustainability |
| PRC Cryptography Law and Commercial Cryptography Assessment | Compliance/Cryptography |
| PRC Cybersecurity Law Articles 1-20 Assessment | Compliance/Cybersecurity |
| PRC Cybersecurity Review Measures Assessment | Compliance/Cybersecurity |
| PRC Data Security Law Assessment | Compliance/Data Governance |
| PRC WEEE Recovery and Disposal Compliance Assessment | Compliance/Environmental |
| PRC WEEE Treatment Operator Qualification Licensing Assessment | Compliance/Environmental |
| Product Environmental Footprint Substantiation Assessment | Compliance/Sustainability |
| Singapore PDPA Compliance Assessment | Compliance/Privacy |
| STIX 2.1 Conformance Assessment | Compliance/Technical Conformance |
| TAXII 2.1 Conformance Assessment | Compliance/Technical Conformance |
| U.S. E-SIGN Act Compliance Assessment | Compliance/Digital Identity; Compliance/Consumer Protection |
| UK Children's Code Age-Appropriate Design Assessment | Compliance/Privacy |
| UK Environmental Claims Consumer-Law Assessment | Compliance/Consumer Protection |
| UK GDPR, Data Protection Act and PECR Compliance Assessment | Compliance/Privacy |
| UK Online Safety Act Service Compliance Assessment | Compliance/Digital Services |
| UN Guiding Principles on Business and Human Rights Assessment | Compliance/Human Rights |
Risk Management
| Template title | Catalog category |
|---|---|
| Australian SOCI Critical Infrastructure Risk Management Program Assessment | Risk Management/Critical Infrastructure |
| CSA CAIQ v4.0.3 STAR Security Questionnaire | Risk Management/Third-Party Risk |
| ETSI TS 102 165-1 V5.3.1 TVRA Risk Analysis Assessment | Risk Management/Cybersecurity |
| EU DORA ICT Third-Party Risk Assessment | Risk Management/Third-Party Risk |
| EU DORA Operational Resilience Assessment | Risk Management/Operational Resilience |
| EU DORA TLPT and TIBER-EU Assessment | Risk Management/Operational Resilience |
| EU DSA VLOP and VLOSE Systemic Risk Assessment | Risk Management/Systemic Risk |
| EU NIS2 Cybersecurity Compliance Assessment | Risk Management/Cybersecurity; Compliance/Cybersecurity |
| ISO/IEC 27005:2022 Information Security Risk Management Assessment | Risk Management/Information Security |
| NIST Cybersecurity Framework 2.0 Profile and Tier Assessment | Risk Management/Cybersecurity |
| NIST Privacy Framework v1.0 Assessment | Risk Management/Privacy |
| NIST SP 800-161 Revision 1 Update 1 Cybersecurity Supply Chain Risk Management Assessment | Risk Management/Cybersecurity |
| NIST SP 800-171 Revision 3 CUI Protection Assessment | Risk Management/Cybersecurity |
| NIST SP 800-218 Secure Software Development Framework (SSDF) v1.1 Assessment | Risk Management/Cybersecurity |
| NIST SP 800-30 Revision 1 Risk Assessment Practice | Risk Management/Cybersecurity |
| NIST SP 800-53 Revision 5 Security and Privacy Control Assessment | Risk Management/Cybersecurity |
| NIST SP 800-61 Rev. 3 Incident Response Readiness Assessment | Risk Management/Cybersecurity |
If a title is unavailable
Check the workspace, category filters, search term, and available Assessment access. Template availability and versions can change after this reference was reviewed. Use the current in-app choices, or ask a workspace administrator to check access when the library cannot be opened. Use IMS templates when you need management-system documents or evidence requests rather than a project questionnaire.