Assessment Design

SIG and CAIQ answer different assessment-scope questions

Shared Assessments scopes SIG Lite, Core, and custom questionnaires around third-party risk and inherent-risk needs. Cloud Security Alliance builds CAIQ into its cloud-focused Cloud Controls Matrix. Select from the relationship, technology, respondent, control scope, artifact version, and evidence need.