question Re: Vendor Responding via SIG Questionnaire in GRC forum

Vendor Responding via SIG Questionnaire

Chandan_jha — Thu, 28 Mar 2024 18:03:33 GMT

Hi,

Is there any detailed documentation/blogs/posts around the Standardized Information Gathering (SIG) Questionnaire Integration and how an organization can leverage this functionality.

Background - We have our own assessment's, that leverage the subset of SIG Core/Lite Questionnaire depending on the domains, that we ask vendors to take. In a lot of scenario's vendor provide their own SIG instead of taking the assessment resulting in manual review's, etc outside of SNOW.

We want to streamline the process and move away from scenarios where we have to do assessments outside of SNOW. Detailed documentation would be a lot of help!

Re: Vendor Responding via SIG Questionnaire

Community Alums — Fri, 29 Mar 2024 09:49:00 GMT

Hi @Chandan_jha ,

The Santa Fe Group's Standardized Information Gathering Questionnaire (SIG) is used to obtain required assessment documentation from a vendor. The vendor contact can upload a pre-filled SIG spreadsheet or take a form-based questionnaire which gets imported to the instance.

Starting with version 11.0.0, only SIG versions 2018 or later are supported. If a vendor uploads a version prior to the 2018 SIG, all responses for matching questions are imported and any responses for questions that don’t match are imported with empty responses for the vendor to answer later.

Starting with version 12.0.0, SIG versions 2019 through 2021 are supported, with limited support for SIG version 2018.

ServiceNow provides an oppurtunity to have a Integration:

Install the GRC: SIG Questionnaire Integration
The GRC: SIG Questionnaire plugin installs the SIG 2018 and SIG 2019 questionnaires and the GRC: SIG Questionnaire Integration plugin installs the SIG 2020 and SIG 2021 questionnaire templates for use with the GRC: Vendor Risk Management application.
Verify the SIG Questionnaire Integration in Vendor Risk Management
After installing SIG Questionnaire Integration, verify questionnaire templates, document request templates, and assessment templates within the Vendor Risk Management application.

Re: Vendor Responding via SIG Questionnaire

Community Alums — Mon, 01 Apr 2024 10:10:39 GMT

Hi @Chandan_jha ,

Re: Vendor Responding via SIG Questionnaire

Chandan_jha — Mon, 01 Apr 2024 16:43:47 GMT

Thanks Sandeep. Do you know if there's any documentation or details around how to configure templates?

Verify the SIG Questionnaire Integration in Vendor Risk Management
After installing SIG Questionnaire Integration, verify questionnaire templates, document request templates, and assessment templates within the Vendor Risk Management application.

Re: Vendor Responding via SIG Questionnaire

Community Alums — Tue, 02 Apr 2024 02:15:22 GMT

Hi @Chandan_jha ,

The link you shared has all the steps to configure templates , also you can navigate as per the steps mentioned and open the OOTB templates, and create your own.