SIG (Standardized Information Gathering)

The SIG consolidates hundreds of questions covering areas such as access control, data security, incident management, and compliance into a uniform format. Clients use it to assess providers in a structured and comparable manner, rather than developing their own questionnaires each time. There are tiered variants such as SIG Core and SIG Lite for different levels of audit depth. The SIG is particularly widespread in the Anglo-American region and is standard in many vendor assessments.

For service providers, the SIG is one of the most demanding questionnaires of all, with hundreds of questions that overlap significantly with other standards such as CAIQ. Once answered thoroughly, it covers a large proportion of future client inquiries — yet without structured storage, each variant has to be worked through from scratch. Clients also send their own customised versions. Those who maintain a well-managed response base can complete the SIG, CAIQ, and client-specific questionnaires using the same knowledge.

With Tendry, you complete the SIG and all related questionnaires from a verified knowledge base. This allows you to answer hundreds of security questions consistently, rather than working through them anew for every client.