CAIQ
The Consensus Assessments Initiative Questionnaire: the Cloud Security Alliance's standard security questionnaire for cloud service providers.
The CAIQ is published by the Cloud Security Alliance and maps to its Cloud Controls Matrix. A cloud provider answers yes or no to each question and adds notes, and can publish the result in the CSA STAR registry as a self-assessment.
Buyers send it because it is free, standard and widely recognised. It is long, so vendors usually answer it once and reuse it.
What a reviewer wants to see
- A completed, current CAIQ they can review
- Answers consistent with your other documents