CAIQ v4
Control DSP-12
Extractive Review Standard
How to answer 'What Data Loss Prevention (DLP) controls are in place?' on a CAIQ
Reviewer Guidance & Pitfalls
Describe DLP controls on endpoints (blocking USB exfiltration, browser download limits) and automated secret/PII scanning in source code repositories.
Example Answer Passing Enterprise Audit
Compliant Response Template
Workforce endpoints enforce MDM policies blocking unauthorized external storage devices; git repositories enforce automated pre-commit scanning to prevent confidential data or secret leakage (SOC 2, CC6.1).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.