Readiness
Draft security questionnaires
Upload a SIG Lite, CAIQ or any spreadsheet questionnaire and get answers drafted from your evidence, each approved by a person.
Transcript (30 seconds)
Draft security questionnaires from your own evidence.
Upload SIG Lite, CAIQ, or any spreadsheet.
Each answer comes with citations.
Every answer is approved by a person.
Export only what was approved.
Before you start
- Vendor Plus
- A claimed domain, and optionally text documents such as your security policy
Steps
Add source documents
Under Questionnaires, add text documents (policies, a SOC 2 summary). Answers can cite them along with your public evidence.
Upload the questionnaire
SIG Lite, CAIQ, or any XLSX or CSV with a Question column, up to 10 MB and 1,000 questions. A plain CSV looks like this.
Ref,Question A.1,Do you support SAML SSO? A.2,Do you have a recent penetration test report?Review drafts
Each answer is drafted with citations. If the sources do not answer it, the draft says it needs an answer from the team.
Approve each answer
Every answer is an approval request in your inbox. Edit the text and approve, or reject.
Export
Download the CSV. Only approved answers are filled in; the rest are listed as pending.
Use cases
A 300-question SIG Lite
- The situation
- A bank sends a SIG Lite due Friday.
- What to do
- Upload it and let your team approve answers through the week.
- What happens
- Most answers arrive drafted with citations; nothing unreviewed leaves.
Keep answers consistent
- The situation
- Different people answered the same question differently last quarter.
- What to do
- Add your current policy as a source document.
- What happens
- Drafts cite the same policy text every time.
What you will see
An export with approved answers and sources, and a list of what still needs a person.
It worked when
- The questionnaire page counts approved answers
- Each answer links its approval request
- The CSV marks unapproved rows as pending
Example output: Two rows of the export
ref,question,answer,status,sources
A.1,Do you support SAML SSO?,Yes. SAML single sign-on is included on every plan.,approved,example.com/security
A.2,Do you have a pen test report?,,pending (pending),,If something goes wrong
- No questions found
- Use a column named Question, or a SIG Lite or CAIQ file as exported.
- Answers say they need the team
- No source covered the question. Add a document that answers it and upload again.
- Drafting failed
- The page shows the error. Retry by uploading again; drafted answers are not lost.