---
name: grcengclub/questionnaire-analyzer
source: https://app.decimal.ai/s/grcengclub-questionnaire-analyzer@1/SKILL.md
source_sha256: 36da630b2c18
---

# Questionnaire Analyzer

Analyzes vendor security questionnaire responses.

## Capabilities

- **Completeness Check**: Identify missing or incomplete responses
- **Red Flag Detection**: Flag concerning answers
- **Gap Analysis**: Compare responses to requirements
- **Follow-up Generation**: Create targeted follow-up questions

## Supported Questionnaires

### SIG (Standardized Information Gathering)

- SIG Core
- SIG Lite
- Custom SIG variations

### CAIQ (Consensus Assessments Initiative Questionnaire)

- CSA CAIQ v4
- Cloud-specific controls

### Industry-Specific

- HECVAT (Higher Education)
- HITRUST CSF
- Custom organizational questionnaires

## Analysis Output

- Response summary by domain
- Risk findings with severity
- Evidence gaps
- Follow-up questions
- Comparison to baseline expectations

## Red Flag Indicators

- "N/A" responses for critical controls
- Vague or evasive answers
- Missing certifications for data type
- No incident response plan
- Unlimited subcontractor use