Automate the collection and analysis of SIG questionnaire responses
The Standard Information Gathering (SIG) questionnaire is a third-party risk assessment curated by Shared Assessments. Available in Core, Lite, and Detail versions, the SIG enables organizations to leverage an industry-standard library of vetted questions that measure risk across 21 domains and four key subjects. Mapping each question to multiple controls and regulatory requirements enables organizations to simplify and standardize their third-party risk management and compliance initiatives.
Mitratech offers SIG Core and SIG Lite questionnaires as part of the Prevalent Third-Party Risk Management solution, providing analytics, additional control mappings, and remediation guidance for SIG users. Additionally, Mitratech leverages the SIG as content for the Prevalent Exchange Network and Prevalent Legal Vendor Network.
Key Benefits
- Automate the collection and analysis of SIG questionnaire answers and supporting evidence with a single platform
- Gain improved visibility into vendor risks with machine learning analytics and reporting
- Provide your team with reliable access to the latest version of the SIG questionnaire
- Simplify regulatory and security framework reporting with additional, built-in control mappings
- Proactively mitigate risk with access to centralized remediation guidance
- Complement and validate SIG questionnaire responses with continuous cyber, business, reputational, and financial risk monitoring
Key Features
Automated Onboarding & Offboarding
Import vendors via a spreadsheet template or through an API connection to an existing procurement solution, eliminating error-prone, manual processes.
Centralized Intake Process
Populate key supplier details with a centralized and customizable intake form and associated workflow. This is available to everyone via email invitation, without requiring any training or solution expertise.
Comprehensive Profiling
Tap into 500,000+ sources of vendor intelligence to build a comprehensive profile that includes industry and business insights, ESG scores, ownership, and fourth- and Nth-party relationships.
Cotation du risque inhérent
Use a simple assessment with clear scoring to capture, track and quantify inherent risks for all third parties.
Profiling & Tiering
Automatically tier suppliers according to their inherent risk scores, set appropriate levels of diligence, and determine the scope of ongoing assessments.
Categorization
Categorize vendors with rule-based logic based on a range of data interaction, financial, regulatory, and reputational considerations.
Due Diligence Collection
Automate the collection of SIG questionnaire answers with built-in chasers, assessment scheduling, and escalation paths.
Risk Review & Analysis
Review and approve assessment responses to automatically register risks, or reject responses and request additional input.
Central Risk Register
Normalize, correlate and analyze assessment results and continuous monitoring intelligence for unified reporting and remediation.
Risk Scoring
Quickly gauge third-party risk levels with consolidated views of risk ratings, counts, scores and flagged responses for each vendor.
Automated Response Actions
Leverage a library of workflow rules to trigger automated playbooks that enable you to appropriately assess and monitor vendors based on their relationship and potential impact to the business.
Machine Learning Analytics
Reveal risk trends, status, and exceptions to common behavior with embedded machine learning insights. Identify outliers across assessments, tasks, risks, and other factors warranting further investigation or score changes.
Data & Relationship Mapping
Identify relationships between your organization and third, fourth and Nth parties to discover dependencies and visualize information paths.
Document & Evidence Management
Store and manage policy documents, evidence and more for dialog and attestation.
Built-in Remediation Guidance
Take actionable steps to reduce vendor risk with built-in remediation recommendations and guidance.
Compliance Mapping & Reporting
Visualize and address compliance requirements by automatically mapping assessment results to requirements.
Connector Marketplace
Access dozens of pre-built connectors that use a low-code approach to integrate the Prevalent solution with traditionally siloed tools.
Flexible Options for Collection & Analysis
Collect and analyze SIG response on your own, or outsource to Mitratech’s expert Vendor Risk Assessment Services.
Contrôle continu
Correlate SIG assessment answers with continuously collected cybersecurity, business, reputational, ESG, and financial data to validate assessment responses and trigger automated actions.
