Guides
Concrete answers, question by question.
Standard questionnaires, GDPR, security, method: practical guides written by the Prova team to prepare your vendor dossiers without starting from scratch.
Security
Do you need ISO 27001 certification to answer a security questionnaire?
No, ISO 27001 certification is almost never required to answer an enterprise security questionnaire. What it actually changes, what it does not exempt you from proving, and how to answer solidly without it, one piece of evidence at a time.
July 12, 2026 · 7 min read
Questionnaires
SIG Lite questionnaire: where to start when you receive one
SIG Lite (Standardized Information Gathering), published by Shared Assessments, is a third-party risk assessment questionnaire widely used in finance. A concrete method for filling it out: the document base, answering domain by domain, handling gaps, and common mistakes.
July 12, 2026 · 7 min read
Questionnaires
CAIQ questionnaire: how to fill it out without starting from scratch
The CAIQ (Consensus Assessments Initiative Questionnaire) is the Cloud Security Alliance's standard questionnaire. A concrete method for filling it out: the document base, answering domain by domain, handling gaps, and common mistakes.
July 2, 2026 · 7 min read
GDPR
GDPR processor questionnaire: answering Article 28 without guesswork
Preparing a GDPR processor questionnaire for an enterprise customer: what the customer's data protection officer checks, the Article 28 clauses, the sub-processor register, and transfers outside the EU.
June 18, 2026 · 7 min read
Method
How to answer a vendor security questionnaire: the four-move method
A concrete method for answering an enterprise vendor security questionnaire: how to qualify the request, find the supporting evidence, flag the gaps, and get internal validation before sending.
June 3, 2026 · 6 min read
Security
Vendor security questionnaire: how to prepare a dossier that passes
Preparing an enterprise vendor security questionnaire: what the customer checks, the supporting evidence expected, the common mistakes, and the Prova method for structuring every answer.
May 12, 2026 · 6 min read