Third-Party Risk Assessments: Updates to SIG 2025

The Shared Assessments Standard Information Gathering (SIG) questionnaire is a key component in many companies' vendor risk management programs, serving as an industry benchmark for assessing third-party controls across 21 risk domains in four key control areas, including Governance & Risk Management, Information Protection, IT Operations & Business Resilience, and Security Incident & Threat Management. Now that the 2025 update is available, what do you need to know?

In this webinar, compliance experts Thomas Humphreys and Sophie Pothecary review key changes and updates to the SIG 2025 questionnaire and share how to leverage new mappings to standards and regulations such as NIST CSF 2.0, NIS2, DORA, and more.

Join Thomas and Sophie as they:

• Introduce the SIG questionnaire and its risk domains.
• Review the top changes and how it compares to 2024.
• Demonstrate how to maximize its value for third-party risk management.
• Recommend steps your TPRM team should take now.

Watch this on-demand webinar to gain an understanding of the pivotal changes to SIG 2025 and learn how to use them to optimize your third-party risk management program.