I built a workspace that answers security questionnaires

I built another workspace, this one answers security questionnaires. It takes the questionnaire a company sends, SIG, CAIQ v4, Google VSAQ, or an Excel file, and turns it into a question list. Every answer cites a source in the approved content, and what it can't cover gets flagged. I review the gaps myself before anything goes out, and the checks that run are plain deterministic scripts.

I ran the whole thing end to end against a practice questionnaire, 30 real questions, with a real company trust page as the content. I have not run it for a real company yet. The company facts are still not set and the content folder has nothing in it.

Right now I do not have a way of getting it in front of others to use, so I don't know if there is value in it. I was just looking into whether this is a good topic. Has anyone here had to answer one of these for a company? Do you think there is value in it? How do you answer them now?

8 comments

I built a workspace that answers security questionnaires