SIG (Shared Assessments) U2: Answer every scoped SIG question completely, with explanations and supporting detail

The responding third party answers each scoped question Yes, No or N/A; an N/A answer must carry an explanation, and the additional information field is used to qualify an answer. Questions are tiered, with detailed child questions beneath parent questions, so the depth of an assessment can be varied. Where the outsourcer uses it, a maturity field adds a second dimension to each answer on the standard five-level scale: not in place with no plans; partially in place with no approved plans; partially in place with approved plans; in place with exclusions; in place with no exclusions. Organisations keep their answers in the SIG Manager content library, build internal SME SIGs to collect answers from their own subject matter experts, consolidate returned SIGs, and can publish a pre-populated response SIG to send to prospective outsourcers.