Shared Assessments 2025 Standard Information Gathering (SIG) Template Question Library Content

The Shared Assessments Program has been setting the standard in third party risk management since 2005, when the Big Four and six global banks collaborated to form Shared Assessments to address the inefficiencies surrounding vendor risk management. The Standardized Information Gathering (SIG) uses a robust compilation of questions to gather pertinent information to determine how security risks are managed across a spectrum of 21 risk control areas within a service provider’s environment. SIG was developed to allow service providers to compile complete information about these risk domains in one document.

On this page

Release notes

SIG 2025

New and changed features

This year brings the addition of significant frameworks to the SIG. These frameworks include Digital Operations Resilience Act (DORA), Network and Information Security Directive 2 (NIS2), and NIST Cybersecurity Framework (CSF) 2.0 (NIST 2.0). By incorporating these frameworks, the SIG offers enhanced assessment of vendor cybersecurity and, by extension, supports your organizational resilience.  Identify areas of concern in your third parties’ security profiles with SIG’s new mappings to:

  • DORA, an EU-wide regulation aiming to improve financial sector’s resilience to cyber and infosec threats
  • NIS2, an EU-wide legislation on providing legal measures to boost overall level of cybersecurity
  • NIST 2.0, a set of guidelines and best practices to help organizations reduce cyber risk

Revision notes

Archer Platform Release

Released Date

Release Notes

6.13

May 2023

Initial Version

6.14

January 2024

Updated to SIG 2024 version
6.14 & 2024.11 January 2025 Updated to SIG 2025 version

Overview of Shared Assessments 2025 SIG Question Library Content

Required files

Configuring SIG 2025 requires the following files from the Archer 2025 SIG content package:

  • 2025 SIG Import (Lite, Core, and Full): Question and answer CSV files to import into the Archer question library

  • Archer Platform Release SIG Lite Installation Package : Preconfigured SIG Lite questionnaire integrated with Archer Engage for Vendors.

Import the SIG Content in Archer

To import the SIG contents in Archer, do the following:

  1. Extract the Question and Answer csv files from 2025_SIG_Import_(Lite,_Core,_and_Full).zip.

  2. Navigate to the question library application and select the Data Import icon.

  3. Select Answers. 

  4. Import the Answer Values. Click on Next. In Mapping Stage Step 2, select the following options:

    1. Import Type: Update Existing Records.

    2. Lookup Field(s): Question Name.

    3. Sub-Form Field(s): Answer.

    4. Verify the mapping in the 'Import Field Mapping' section. Click on Next.

  5. Verify the import summary and click on Import. 

After successfully importing the Answer Values, begin importing questions.

  1. Navigate to the Question Library application and select the Data Import icon.

  2. Select Question Library.

  3. Import the question values and click on Next.

  4. In Mapping stage, select the following options:

    1. Import Type: Update Existing Records.

    2. Lookup Field(s): Question Name.

    3. Verify the mapping in the 'Import Field Mapping' section and click on Next.

  5. Verify the import summary and click on Import.

Installing SIG Lite Questionnaire Installation Package or Create a Questionnaire Using SIG Content

After Importing the Questions and the Answers to the Question Library, preconfigured SIG Lite questionnaire can be installed or a questionnaire can be created manually using SIG content.

Task 1: Installing SIG Lite Questionnaire (Optional)

Complete the following steps to install the package.

Step 1: Prepare for the installation

  1. Ensure that your Archer system meets the following requirements:

    • Archer Platform Version: 6.14 or later.

      or

    • Archer Platform Version: 2024.11 or later.

Step 2: Install the package

Installing a package requires that you import the package file, map the objects in the package to objects in the target instance, and then install the package.

Please visit Installing Packages for any help.

Task 2: Create a Questionnaire using SIG content (Optional)

After importing the SIG content into Archer, use the following steps to create a questionnaire.

  1. From the menu bar, click Admin menu> Application Builder > Applications.

  2. Click Add.

  3. From the Type field, select Questionnaire. Enter a name, assign it to one or more solutions, and select a default language.

  4. In the Target Application field, select the target application, Third Party Profile, that houses the preconfigured Archer SIG Lite questionnaire, and click OK.

  1. To copy questions from the Question Library into the questionnaire, select Display Question Library selection page.

  2. On the Record Lookup page, click Show Filters.

  3. In the filter under Question Name, enter sigv25.

  4. Click Enter.

  5. Select the question(s) associated with the categories to import. Archer recommends that you do not import more than 1 page of questions at a time.

  6. Click OK.

Configuring the Questionnaire

Task 1: Configure Engage

Archer Engage allows users to publish information requests from Archer to an External Portal. Engage is configured in Archer SIG Lite Questionnaire to send/receive responses from Vendors. To use the pre-configured Engage functionalities, Archer Engage Agent needs to be installed on the server since Engage uses the Archer Engage Agent to publish content between Archer and the Engage Portal. To install the Engage Agent on the server, follow the steps mentioned in the Engage Help.

Once the Archer Engage Agent installation is completed. Configure the installed Archer SIG Lite questionnaire or the questionnaire you created using SIG content as mentioned below.

  1. From the menu bar, click Admin menu > Application Builder > Applications. Open the Questionnaire.

  2. On the Properties tab, in the Options section, select Enable Engage.

  3. Click to save your changes.

  4. Navigate to the field listing and search for 'Requesting Company' field.

    1. Go to calculation properties to edit the formula.

    2. In the formula enter your company name, validate the formula and save it.

  5. Navigate to the newly displayed Engage tab

    • If you installed the pre-configured Archer SIG Lite Questionnaire package, the fields are already mapped in the Engage tab, but you need to change your Publish URL.

    • If you created your own questionnaire, map the fields from your questionnaire to the fields listed in the Engage tab. If you need any help on the mapping, please visit Engage Help.

Task 2: Enable Findings

To Enable Findings option in your questionnaire, follow the below steps.

  1. From the menu bar, click Admin menu > Application Builder > Applications. Open the questionnaire.

  2. On the Properties tab, in the Options section, select Enable Findings.

  3. Click Save to save your changes.

Certification environment

Date tested: January 2025

Product Name

Release Information

Operating System

Archer

6.14 & 2024.11

Virtual Appliance