---
title: Publish the assessment questionnaire
description: For testing a mobile application, there are certain standards developed by the OAS community to help testers identify the bugs in their products. Navigate to the assessment workspace to create the questionnaire of your choice. Publish them to be able to view in the assessment request form.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/publish-the-assessment-questionnaire.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Penetration testing workspace, Use, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Publish the assessment questionnaire

For testing a mobile application, there are certain standards developed by the OAS community to help testers identify the bugs in their products. Navigate to the assessment workspace to create the questionnaire of your choice. Publish them to be able to view in the assessment request form.

## Before you begin

Role required: sn\_vul.app\_pen\_test\_requester

Roles required for Penetration testing Requester and Tester:

**sn\_vul.app\_manage\_pen\_test\_request:**

contains: sn\_smart\_asmt.assessment\_reader sn\_smart\_asmt:assessment\_admin sn\_smart\_asmt.actor.

**sn\_vul.app\_pen\_tester**

contains: sn\_smart\_asmt.assessment\_reader sn\_smart\_asmt:actor.

**Note:** As part of the Smart Assessment Engine feature, we have added the above roles. These roles are essential for the Penetration testing requester and tester to be able to view and submit the questionnaires.

## Procedure

1.  Navigate to **Assessment workspace**.

2.  There are guidelines inside each questionnaire, review the questionnaires, if necessary change to meet your organization’s testing needs following which you can finish the testing.

    The questionnaire by default follows the MASVS standards. For more info visit:

3.  Publish the questionnaires and select the published questionnaire from the list under the testing details section of the Penetration Testing assessment request form.

    **Note:** Publish the questionnaire to be able to view it on the Penetration Testing request assessment request form.

4.  The persona performing testing can then mark the tests as pass or fail or not applicable under the assessment tab of the Penetration Testing request form.