CAIQ v4
Control IVS-14
Extractive Review Standard
How to answer 'Are unused network ports, services, and protocols disabled by default?' on a CAIQ
Reviewer Guidance & Pitfalls
State minimal OS base images (Alpine/Distroless) and security groups blocking all unneeded ports.
Example Answer Passing Enterprise Audit
Compliant Response Template
Yes. Production containers use minimal distroless base images with only required application ports (443) exposed via security groups (SOC 2, CC6.6).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.