Skip to content

Glossary: Business Risk, Third Parties and Compliance

Security questionnaire

Also written: questionnaire

A standard list of questions about a vendor's controls, used to gather evidence in a vendor assessment. Answers without proof count for little.

Where the book teaches it

Related terms

SIG (Standardized Information Gathering) questionnaireCAIQ (Consensus Assessments Initiative Questionnaire)Self-attestation