You might consider purchasing a license to the SIG questionnaires. This detailed list of questions can then be customized for your needs. Some GRC tools allow you to import the SIG or SIG Lite and may also have it pre-imported where you license it for a fee.
https://sharedassessments.org/sig/
$7500 for a single license for one year.
Kate Wakefield CISSP, CIPT, MPA
Sr. Manager Security Compliance