What Are GRC Tools? The Governance, Risk, and Compliance (GRC) software landscape has undergone dramatic transformation in the past decade. What began as a tool for managing compliance has evolved into sophisticated platform solutions for addressing a wide range of...
We interact with current and prospective users of the Standardized Information Gathering Questionnaire (SIG) on a daily basis. Something we’ve both observed is segmentation on how Outsourcers and Vendors are using the SIG. We see organizations using the SIG as...
Frequently, we field questions from our current and prospective product users around Shared Assessments’ Standardized Information Gathering (SIG) Questionnaire vs. Cloud Security Alliance’s Consensus Assessments Initiative Questionnaire (CAIQ). Working for Shared Assessments, I am more familiar with the SIG, but...
Introduction: “What if today, we were just grateful for everything?” Happy week of Thanksgiving! Charlie Brown, beloved comic strip poet and philosopher, probably said it best: "What if today, we were just grateful for everything?" With a theme of gratitude,...
Monster mashes, zombie jamborees, and ghostly galas: Happy Halloween! While we know you will be dancing to Thriller in a graveyard tonight, do not forget the calculated dance of risk management. Organizations are tasked with a monumental mission in the...
Shared Assessments is pleased to announce that the Standard Information Gathering Questionnaire (SIG) 2023 mapping is now incorporated into the Secure Controls Framework (SCF) catalog of controls version 2022.3. This was a collaborative endeavor between Shared Assessments and the SCF....
