Due Diligence and Ongoing Monitoring

 View Only
Venminder Venmonitor
Back to discussions
Expand all | Collapse all

What percent of your assessments rely on SIG/SIG Lite or CAIQ?

  • 1.  What percent of your assessments rely on SIG/SIG Lite or CAIQ?

    This message was posted by a user wishing to remain anonymous
    Posted 07-15-2025 10:56 AM
    This message was posted by a user wishing to remain anonymous

    We're moving to a new TPRM tool and taking the time to adjust our risk questionnaire.  We prefer if a third-party provides SOC 2 Type II or ISO 27001, but for those who do not have either, we're curious how many organizations receive self assessments such as SIG or CAIQ and rely on those responses.