questionnaire

Auto-fill security questionnaires by feeding Shasta scan findings and policy documents into the engine, which generates pre-filled answers. It supports SIG Lite, CAIQ v4, and Generic Enterprise questionnaires, outputting audit-ready CSV and Markdown files.

Supported compliance questionnaire formats include SIG Lite, CAIQ v4, and Generic Enterprise questionnaires. The automation engine processes these formats using recent scan data to generate consistent, evidence-backed responses for security audits.

Yes, generating pre-filled CAIQ responses requires access to a recent or latest Shasta scan. The questionnaire engine uses this scan data alongside policy documents to automatically populate answers and export them to CSV and Markdown formats.

Prepare for automated questionnaire generation by running a Shasta scan and configuring the python_cmd in shasta.config.json. The QuestionnaireEngine uses this setup to process scan data and policy documents, producing ready-to-submit CSV and Markdown outputs.

Yes, you can export questionnaire answers to both CSV and Markdown formats. The engine processes SIG Lite, CAIQ, and Enterprise questionnaires using scan findings to generate these audit-ready output files for compliance delivery.

The tool works with both standard formats like SIG Lite and CAIQ, as well as Generic Enterprise questionnaires. It uses the QuestionnaireEngine and configured scan data to generate pre-filled answers and export them as CSV and Markdown files.