What is the SIG Questionnaire? TPRM Simplified | UpGuard

This document explains the Standardized Information Gathering (SIG) questionnaires for third-party risk management, outlining their purpose, structure (Core vs. Lite), key risk domains (including new additions like Supply Chain Risk Management and AI), and annual updates with enhanced compliance mappings (e.g., ISO 27001:2022, PCI DSS v4.0). It provides example questions across domains, guidance on achieving SIG alignment, and highlights how platforms like UpGuard can streamline questionnaire workflows and complement point-in-time assessments with continuous security ratings.