What is the CAIQ (Consensus Assessment Initiative Questionnaire)?
CAIQ explained: cloud control matrix alignment, how CSPs use it, and tips for accurate responses tied to evidence.
Trust · SecureSlate Team
- all posts (2468)
- AI (66)
- Cybersecurity (197)
- HIPAA (168)
- ISO 27001 (277)
- SOC 2 (267)
- PCI DSS (45)
- GRC (640)
- TPRM (86)
- GDPR (115)
- Compliance (4)
- NIST (43)
- Comparisons and Reviews (116)
- ISO 27701 (4)
- ISO 18841 (10)
- ISO 27018 (4)
- ISO 17100 (10)
- ISO 27017 (4)
- ISO 22301 (4)
- ISO 9001 (4)
- Templates (10)
- Whistleblowing (20)
- Integrations (50)
- Trust And Assurance (1)
- ISO 42001 (30)
- CMMC (41)
- Tools & Software (170)
- Trust (53)
- FedRAMP (39)
- HITRUST (13)
- Checklists (4)
- Vendor Risk (3)
- Risk Management (1)
- Security (1)
- DORA (8)
- Vendor Risk Management (5)
- Security Operations (1)
- Access Control (1)
- Strategy (3)
- Guides (11)
- CJIS (1)
- CCPA (1)
- NIS 2 (7)
- Engineering (1)
What is the Cybersecurity Maturity Model Certification (CMMC)?
CMMC is the DoD program that verifies defense contractors protect FCI and CUI. Learn CMMC 2.0 levels, assessments, DFARS ties, and the Nov 2025 rollout.
CMMC · SecureSlate Team
What is the HIPAA Breach Notification Rule? Timelines, requirements, and response steps
What is the HIPAA Breach Notification Rule? Learn the notification timelines, requirements, and response steps for covered entities and business associates.
HIPAA · SecureSlate Team
What is the HIPAA minimum necessary rule? Limits, exceptions, and practical implementation
What is the HIPAA minimum necessary rule? Learn the limits, the exceptions, and how to implement it in practice, with controls and evidence for audit readiness.
HIPAA · SecureSlate Team
What is the SIG questionnaire?
The Standardized Information Gathering (SIG) questionnaire explained: versions, when buyers use it, and how vendors should respond efficiently.
Trust · SecureSlate Team
What is the VSAQ (Vendor Security Alliance Questionnaire)?
The Vendor Security Alliance Questionnaire (VSAQ) explained: scope, adoption, and how it fits alongside SIG and CAIQ.
Trust · SecureSlate Team
What is third-party risk management (TPRM)?
TPRM is the discipline of identifying, assessing, treating, and monitoring risk from vendors and partners. Learn components, roles, and tooling.
TPRM · SecureSlate Team
What is vendor onboarding? Benefits and best practices
Vendor onboarding connects procurement, security, and IT provisioning. Learn benefits, steps, and how to avoid access sprawl.
TPRM · SecureSlate Team
When tokenmaxxing leads to riskmaxxing: Shadow AI and what security leaders should do
When tokenmaxxing leads to riskmaxxing: how AI mandates drive Shadow AI, why it dwarfs Shadow IT, and what security leaders should do about it.
Vendor RiskAI · SecureSlate Team
Who is responsible for SOC 2? Roles, RACI, and how to avoid a one-person program
SOC 2 is a company-wide program, not only security. Learn who owns SOC 2, which teams contribute evidence, and how to assign accountability before fieldwork.
SOC 2 · SecureSlate Team
