AboutWhat's newContact & demo
Third-Party Risk ManagementAvailable now

Ask vendors only what matters.

A central question bank mapped to controls, AI that ranks questions by relevance to each vendor, and questionnaires whose depth follows the vendor's tier.

Illustration with sample data

Overview

What Questionnaires & Question Bank does

The Question Bank stores each question's domain, category, objective, expected evidence, response type and weight, and can be imported from CSV or Excel. Each question can be mapped to SCF controls, so answers relate to every framework those controls reach. Auto Filter ranks bank questions against a vendor's profile, covering service, delivery model, data, volumes, tenure and findings history. It only selects questions and never sends anything.

Questionnaires support text, yes/no and upload responses, mandatory flags and per-question acceptance criteria. An 'Asked from' tier means critical vendors get deeper questionnaires than low-risk ones. Question Lineage records whether a question is the same, equivalent, revised or replaced across versions, so reassessments can reuse earlier answers safely.

Hand marking off items on a checklist
Capabilities

Key capabilities

01

Structured question bank

Domain, objective, expected evidence, response type and weight.

02

Mapped to controls

Questions map to SCF controls and every framework they reach.

03

AI relevance ranking

Auto Filter ranks questions against the vendor's profile.

04

Tier-based depth

Questions asked from a minimum tier upward.

05

Acceptance criteria

Per-question criteria that reviewers and AI evidence checks use.

06

Question lineage

Same / equivalent / revised / replaced, confirmed by an administrator.

Benefits

The business case.

Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Questionnaires & Question Bank changes for your programme.

Potential savings
>60%

Shorter questionnaires

Relevance ranking and tier depth remove questions that don't apply.

Streamlined processes
Better response rates

Less vendor fatigue

Tailored questionnaires get answered faster.

Multi-compliance alignment
Mapped once

Answers count across frameworks

Control mapping relates answers to every linked framework.

Reduced complexity
One library

Across all questionnaires

Maintain questions centrally rather than in many templates.

Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.

How it works

From setup to outcome.

Import questions

Upload CSV or Excel, or add questions manually.

Map and tier

Map to controls and set the minimum tier.

Build

Let AI rank relevance, then select and weight questions.

Assign

Send to vendors and track responses.

Framework alignment

Supports your obligations.

Questionnaires & Question Bank contributes evidence and coverage to these frameworks and regulations.

ISO/IEC 27001:2022 (A.5.19–A.5.23)NIST CSF 2.0 (GV.SC)SOC 2 (CC9.2)SIG-style domains

All supported frameworks

FAQ

Common questions.

What import formats are accepted?

CSV, XLSX or XLS with columns for ID, domain, category, sub-category, question, objective, expected evidence, response type, questionnaire type and weight.

Does AI send questionnaires?

No. Auto Filter only ranks and selects questions; people build and send questionnaires.

How does depth by tier work?

Each question can be asked from a minimum tier upward, so a Critical vendor gets more questions than a Low one.

See Questionnaires & Question Bank in action.

Book a 30-minute walkthrough tailored to your frameworks, vendors and team.