What is the CAIQ (Consensus Assessment Initiative Questionnaire)?
CAIQ explained—cloud control matrix alignment, how CSPs use it, and tips for accurate responses tied to evidence.
Trust · SecureSlate Team
- all posts (2335)
- ISO 17100 (10)
- Comparisons And Reviews (85)
- HIPAA (160)
- SOC 2 (266)
- Templates (10)
- ISO 27001 (283)
- Whistleblowing (20)
- GRC (611)
- Integrations (50)
- Trust And Assurance (1)
- ISO 42001 (30)
- TPRM (84)
- CMMC (41)
- Cybersecurity (165)
- GDPR (110)
- Tools & Software (176)
- AI (60)
- Trust (53)
- PCI DSS (39)
- NIST (39)
- FedRAMP (40)
- Vendor Risk (3)
- Risk Management (1)
- HITRUST (14)
- Security (1)
- DORA (8)
- Vendor Risk Management (5)
- Compliance (3)
- Security Operations (1)
- Access Control (1)
- Strategy (3)
- Guides (11)
- CJIS (1)
- CCPA (1)
- NIS 2 (7)
- Case Study (5)
- Engineering (1)
What is the Cybersecurity Maturity Model Certification (CMMC)?
CMMC is the DoD program that verifies defense contractors protect FCI and CUI. Learn CMMC 2.0 levels, assessments, DFARS ties, and the Nov 2025 rollout.
CMMC · SecureSlate Team
What is the HIPAA Breach Notification Rule? Timelines, requirements, and response steps
What is the HIPAA Breach Notification Rule? Timelines, requirements, and response steps — What Is The HIPAA Breach Notification Rule. HIPAA guidance on controls,…
HIPAA · SecureSlate Team
What is the HIPAA minimum necessary rule? Limits, exceptions, and practical implementation
What is the HIPAA minimum necessary rule? Limits, exceptions, and practical implementation — What Is The HIPAA Minimum Necessary Rule. HIPAA guidance on controls,…
HIPAA · SecureSlate Team
What is the SIG questionnaire?
The Standardized Information Gathering (SIG) questionnaire explained—versions, when buyers use it, and how vendors should respond efficiently.
Trust · SecureSlate Team
What is the VSAQ (Vendor Security Alliance Questionnaire)?
The Vendor Security Alliance Questionnaire (VSAQ) explained—scope, adoption, and how it fits alongside SIG and CAIQ.
Trust · SecureSlate Team
What is third-party risk management (TPRM)?
TPRM is the discipline of identifying, assessing, treating, and monitoring risk from vendors and partners. Learn components, roles, and tooling.
TPRM · SecureSlate Team
What is vendor onboarding? Benefits and best practices
Vendor onboarding connects procurement, security, and IT provisioning. Learn benefits, steps, and how to avoid access sprawl.
TPRM · SecureSlate Team
When tokenmaxxing leads to riskmaxxing: Shadow AI and what security leaders should do
When tokenmaxxing leads to riskmaxxing: Shadow AI and what security leaders should do — When Tokenmaxxing Leads To Riskmaxxing Shadow AI. Vendor Risk, AI guidance…
Vendor RiskAI · SecureSlate Team
Who is responsible for SOC 2? Roles, RACI, and how to avoid a one-person program
SOC 2 is a company-wide program—not only security. Learn who owns SOC 2, which teams contribute evidence, and how to assign accountability before audit fieldwork.
SOC 2 · SecureSlate Team
