01
SIG Lite: 200+ questions across key security domains
02
SIG Core: 800+ questions covering 18 risk domains
03
Annual assessment cycle with evidence collection
04
Shared Assessments membership enables assessment sharing
Standardized Information Gathering Questionnaire
SIG is the industry standard for third-party risk assessment. SIG Lite provides streamlined assessment, SIG Core delivers comprehensive evaluation of 18 risk domains.
SIG Lite: 200+ questions across key security domains
SIG Core: 800+ questions covering 18 risk domains
Annual assessment cycle with evidence collection
Shared Assessments membership enables assessment sharing
QFX maps to SIG Lite and SIG Core domains.
LiveThreat scorecards pre-screen before sending SIG.
Track assessment completion and remediation.
Pre-populate answers from automated discovery.
SIG compliance is critical for organizations in these sectors.
Assess your first vendors free — no credit card, no contract, no gym membership required.
Try 5 Vendors for Free →