Glossary: Business Risk, Third Parties and Compliance
Security questionnaire
Also written: questionnaire
A standard list of questions about a vendor's controls, used to gather evidence in a vendor assessment. Answers without proof count for little.
Where the book teaches it
Related terms
SIG (Standardized Information Gathering) questionnaireCAIQ (Consensus Assessments Initiative Questionnaire)Self-attestation