Shared Assessments 2026 Standard Information Gathering (SIG) Template Question Library Content

The Shared Assessments Program has been setting the standard in third party risk management since 2005, when the Big Four and six global banks collaborated to form Shared Assessments to address the inefficiencies surrounding vendor risk management. The Standardized Information Gathering (SIG) uses a robust compilation of questions to gather pertinent information to determine how security risks are managed across a spectrum of 21 risk control areas within a service provider’s environment. SIG was developed to allow service providers to compile complete information about these risk domains in one document.

Archer Exchange: With the Archer Exchange, the Archer team and our trusted partners have created a broad selection of supplemental, value-added offerings to help you get your unique risk management program on the right path, right from the start. You can leverage the Archer Exchange offerings to expand the use of Archer solutions into new business processes and address specific industry, geographic, regulatory, or technical requirements. The Archer Exchange features a fast and agile development cycle, enabling quick delivery of new and updated offerings for trending issues and connections to innovative technologies.

On this page

Release notes

Release

Released Date

Release Notes

Archer Platform 6.13

May 2023

Initial Version

Archer Platform 6.14

January 2024

Updated to SIG 2024 version
Archer Platform 6.14 & Archer Platform 2024.11 January 2025

Updated to SIG 2025 version

This year brings the addition of significant frameworks to the SIG. These frameworks include Digital Operations Resilience Act ( DORA ), Network and Information Security Directive 2 ( NIS2 ), and NIST Cybersecurity Framework (CSF) 2.0 ( NIST 2.0 ). By incorporating these frameworks, the SIG offers enhanced assessment of vendor cybersecurity and, by extension, supports your organizational resilience.  Identify areas of concern in your third parties’ security profiles with SIG’s new mappings to:

  • DORA, an EU-wide regulation aiming to improve financial sector’s resilience to cyber and infosec threats
  • NIS 2, an EU-wide legislation on providing legal measures to boost overall level of cybersecurity
  • NIST 2.0, a set of guidelines and best practices to help organizations reduce cyber risk
Archer Platform 2024.11 October 2025 Updated to SIG 2026 version. Please see the Shared Assessments SIG 2026 blog for key updates and enhancements.
Archer Platform 2024.11 January 2026

Updated with the latest SIG 2026 content release and added new questions in the SIG 2026 LITE questionnaire.

Required files for SIG 2026

Configuring SIG 2026 requires the following files from the Archer 2026 SIG content package.

  • 2026 SIG Import (Lite, Core, and Full): Question and answer CSV files to import into the Archer question library.

  • Archer Platform Release SIG Lite Installation Package: Preconfigured SIG Lite questionnaire integrated with Archer Engage for Vendors.

Import the SIG Content in Archer

  1. Extract the Question and Answer csv files from 2026_SIG_Import_(Lite,_Core,_and_Full).zip.

  2. Navigate to the question library application and select the Data Import icon.

  3. Select Answers. 

  4. Import the Answer Values. Click on Next. In Mapping Stage Step 2, select the following options:

    1. Import Type: Update Existing Records.

    2. Lookup Field(s): Question Name.

    3. Sub-Form Field(s): Answer.

    4. Verify the mapping in the 'Import Field Mapping' section. Click on Next.

  5. Verify the import summary and click on Import. 

After successfully importing the Answer Values, begin importing questions.

  1. Navigate to the Question Library application and select the Data Import icon.

  2. Select Question Library.

  3. Import the question values and click on Next.

  4. In Mapping stage, select the following options:

    1. Import Type: Update Existing Records.

    2. Lookup Field(s): Question Name.

    3. Verify the mapping in the 'Import Field Mapping' section and click on Next.

  5. Verify the import summary and click on Import.

Installing SIG Lite Questionnaire Installation Package or Create a Questionnaire Using SIG Content

After Importing the Questions and the Answers to the Question Library, preconfigured SIG Lite questionnaire can be installed or a questionnaire can be created manually using SIG content.

Task 1: Installing SIG Lite Questionnaire (Optional)

  1. Prepare for the installation. Ensure that your Archer system is at Archer Platform version 2024.11 or later.

  2. Install the package. Installing a package requires that you import the package file, map the objects in the package to objects in the target instance, and then install the package. For more information see "Installing Packages" in the Archer Platform Help.

Task 2: Create a Questionnaire using SIG content (Optional)

  1. From the menu bar, click Admin menu> Application Builder > Applications.

  2. Click Add.

  3. From the Type field, select Questionnaire. Enter a name, assign it to one or more solutions, and select a default language.

  4. In the Target Application field, select the target application, Third Party Profile, that houses the preconfigured Archer SIG Lite questionnaire, and click OK.

  1. To copy questions from the Question Library into the questionnaire, select Display Question Library selection page.

  2. On the Record Lookup page, click Show Filters.

  3. In the filter under Question Name, enter sigv26.

  4. Click Enter.

  5. Select the question(s) associated with the categories to import. Archer recommends that you do not import more than 1 page of questions at a time.

  6. Click OK.

Configuring the Questionnaire

Task 1: Configure Engage

  1. Archer Engage allows users to publish information requests from Archer to an External Portal. Engage is configured in Archer SIG Lite Questionnaire to send/receive responses from Vendors. To use the pre-configured Engage features, Archer Engage Agent needs to be installed on the server; Engage uses the Archer Engage Agent to publish content between Archer and the Engage Portal. To install the Engage Agent on the server, complete the steps in the Engage Help.

  2. From the menu bar, click Admin menu > Application Builder > Applications. Open the Questionnaire.

  3. On the Properties tab, in the Options section, select Enable Engage.

  4. Click to save your changes.

  5. Navigate to the field listing and search for 'Requesting Company' field.

    1. Go to calculation properties to edit the formula.

    2. In the formula enter your company name, validate the formula and save it.

  6. Navigate to the newly displayed Engage tab

    • If you installed the pre-configured Archer SIG Lite Questionnaire package, the fields are already mapped in the Engage tab, but you need to change your Publish URL.

    • If you created your own questionnaire, map the fields from your questionnaire to the fields listed in the Engage tab. For information on the mapping see the Archer Engage Help.

Task 2: Enable Findings

  1. From the menu bar, click Admin menu > Application Builder > Applications. Open the questionnaire.

  2. On the Properties tab, in the Options section, select Enable Findings.

  3. Click Save to save your changes.

Certification environment

Date tested: October 2025

Product Name

Release Information

Operating System

Archer

2024.11

Virtual Appliance