Security questionnaires
Last checked on
Under Security questionnaires you upload the questionnaire a customer sends you. The AI proposes an answer per question from what you have already established, and you review every answer before you export the list.
Why this protects your organisation
Customers who assess you as a supplier often send long questionnaires with questions you have answered before. The answer is usually already in your established policies, controls, scope or trust page. Drawing a proposal from there saves time, and because a person reviews every answer, nothing reaches a customer that is not right.
Steps
- Open Security questionnaires in the Prove group and click Upload questionnaire.
- Give the list a name, choose the xlsx or csv file, choose the column that holds the questions and say whether the first row is a header. Click Create.
- Under Questions the AI proposal appears for each question, with the sources it rests on. Choose Take over, Change and take over, or Reject.
- When the AI found no fitting source or was not sure enough, choose Answer myself.
- Once every question has an answer, click Export at the top. You get the list back in the same format, with the origin of each answer and who reviewed it.
The AI only answers a question from your own established content and names the sources it used. It adds no practices, certificates or figures that are not in there. Each proposal stays a proposal until someone takes it over, changes it or rejects it, and that decision is in the audit log with name and moment.
The export shows per answer whether the AI proposed it, the AI proposed it and it was changed afterwards, or a person wrote it, and who reviewed it and when.
If it does not work
Trustbird finds no questions in my file
Choose the column that holds the questions, as you see it in your spreadsheet program. Trustbird only reads the first sheet.
Export is not available
You can export once every question has an answer someone took over, changed or wrote. Use the Answered filter to see which questions are still open.
Many questions say No fitting source
The AI only uses established content: the current version of your documents, active controls, your established scope and established trust page items. Drafts do not count. Establish your policies and controls to get more proposals later.
Screens this is about
- Security questionnaires