Tickbox Draft your answers free
Guides

Guides & example answers

Plain-English guides to answering security and compliance questionnaires, with example answers you can adapt. Free to read, no signup.

Start here

How to complete a supplier security questionnaire (with examples)

Just been sent a long security or vendor questionnaire by a customer? Here is how to work through it calmly, what each part is really asking, and example answers you can adapt.

Read the guide →
Suppliers

Supplier security assurance questionnaires: how to answer one

A customer has asked you to complete a supplier assurance or third-party risk questionnaire before they sign. Here is what they are checking, and how to answer it well as a small supplier.

Read →
Frameworks

The SIG questionnaire explained, and how to answer it

Been sent a "SIG" questionnaire? Here is what the Standardized Information Gathering questionnaire is, why it can run to hundreds of questions, and how to work through it without a security team.

Read →
Frameworks

Cyber Essentials questionnaire: what customers ask and how to answer

Customers increasingly ask suppliers about Cyber Essentials, or about the same technical controls it covers. Here is what they are really checking, and how to answer whether or not you hold the certificate.

Read →
Frameworks

Cyber Essentials self-assessment: the questions and how to answer them

Filling in a Cyber Essentials self-assessment, or answering a customer questionnaire based on it? Here is what each of the five control areas is really checking, in plain English, with example answers.

Read →
Question by question

Common security questionnaire questions, decoded (with example answers)

Most security questionnaires ask the same core questions in different words. Here are the ones that come up again and again, what each is really getting at, and how to answer.

Read →
Data protection

Data protection questionnaire: how to answer UK GDPR questions (with examples)

Been asked to complete a data protection or GDPR questionnaire? Here is what your customer is checking, the UK GDPR idea behind each question, and example answers you can adapt.

Read →
Frameworks

ISO 27001 questionnaire: how to answer when you are not certified

A customer is asking ISO 27001 questions but you are not certified? You can still answer well. Here is what the questions are getting at and how to respond honestly.

Read →
Templates

SIG, CAIQ and VSA: common security questionnaire templates explained

Received a questionnaire with a name like SIG or CAIQ? Here is what the common templates are, how they differ, and how to answer any of them without starting from scratch each time.

Read →

Answer your questionnaire in minutes

Drop it in and Tickbox drafts every answer for you to review. Your first few are free.

Try it free