SIG Lite
Control STA-06
Extractive Review Standard
How to answer 'How do you monitor the uptime and security posture of critical cloud vendors?' on a SIG Lite
Reviewer Guidance & Pitfalls
Explain how primary cloud subprocessor statuses (AWS status page, Cloudflare, Stripe) are monitored and factored into our own status page communications.
Example Answer Passing Enterprise Audit
Compliant Response Template
Critical infrastructure providers are monitored continuously via automated status webhooks; vendor outages trigger our business continuity communications and customer status updates (SOC 2, CC9.2).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.