You must have Control Compliance Suite (CCS) installed to use the questionnaires as evidence. In the CCS Policy view, you have control statements mapped to a policy. The control statements must also be mapped to the questionnaire in RAM. The Symantec Content Studio maps the control statements to the questions in the questionnaire. The Content Studio also maps the control statements to policies.

If a question and a policy are mapped to the same control statement, the question can be used as evidence for the policy. The same CCS asset must be part of the policy and the questionnaire.