SAQ (Self-Assessment Questionnaire)

What is SAQ (Self-Assessment Questionnaire)?

A SAQ requests details about a vendor’s security, privacy, operational, and compliance controls. It is frequently used during onboarding and periodic reviews. In TPRM, SAQs supplement evidence collection and automated monitoring.

FAQs

Are SAQs verified?

They should be validated with evidence.

Do all vendors complete SAQs?

Yes, but depth varies by tier.

Are SAQs regulatory?

Some industries mandate them.