CAIQ v4 Control HRS-06 Extractive Review Standard

How to answer 'Do you maintain a documented disciplinary policy for security breaches or policy violations?' on a CAIQ

Reviewer Guidance & Pitfalls

State that policy violations follow a formal progressive disciplinary process up to and including termination and legal action, cited in the Employee Handbook.

Example Answer Passing Enterprise Audit

Compliant Response Template
Yes. Our Employee Handbook documents a formal disciplinary process for security policy violations, ranging from retraining and written warnings up to immediate termination (SOC 2, CC1.5).

Filling out a CAIQ or SIG Lite right now?

QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.

Zero spam. 100% confidential. No credit card required.