Home Blog Security

Security

You've Been Sent a Vendor Security Questionnaire - What Now?

A first security questionnaire is a buying signal, not a rejection. Here's how to triage it, who should own it, and what to do in the first forty-eight hours.

Posted by Kevin Yun | 2026-08-12T08:53:22.909Z

What is the CAIQ, and when will a buyer ask for it?

The CAIQ is the Cloud Security Alliance's free security questionnaire: 261 yes-or-no questions mapped to the Cloud Controls Matrix, and free to publish.

Posted by Kevin Yun | 2026-08-11T08:00:57.685Z

What is a SIG Questionnaire?

A SIG is a standardized security questionnaire from Shared Assessments. A customer sent you one because you now count as a third party worth assessing.

Posted by Kevin Yun | 2026-08-11T07:54:29.926Z

Try It Free for 14 Days,
See if It's Right for You

No credit card required