Browse categories
Explore
Fiverr Pro
English
$
USD
I will complete your sig caiq or hecvat security questionnaire
CMMC, HIPAA and NIST compliance advisor, CISM, CMMC RPA
I'm Sam Durso, founder of The Cyber Friend LLC. I help small and medium businesses get ready for CMMC, meet the HIPAA Security Rule, assess risk against NIST CSF 2.0, and write the policies and plans ...
Vetted by Fiverr Pro
Sam was selected by the Fiverr Pro team for their expertise.
Vetted for
Cybersecurity
About this Gig
Vetted Pro
A deal is sitting still. Your customer's security team sent a questionnaire, procurement is asking again, and it has been on your CTO's desk for two weeks.
I answer it.
Not with guesses. I take what you actually run, map it against what the questionnaire asks, and write answers that hold up when someone follows up on one.
What you receive:
- Every question answered, sourced to something you told me or a document you sent
- SIG, SIG Lite, CAIQ, HECVAT, VSA, or whatever spreadsheet your customer invented
- Gaps flagged honestly, with what to say about them and what to fix
- An evidence index: what to attach, and what to leave out
- A reusable answer library so the next questionnaire takes hours instead of weeks
You review and submit. I draft, you own it, and every answer traces to something real. I will not write yes for a control you do not have, because that answer becomes a contractual representation the moment you send it, and it is the one thing that turns a slow deal into a lawsuit.
Send me the questionnaire and your deadline, and I will tell you which tier fits.
Expertise:
Privacy
•
Data Protection
•
Risk Assesment
Technology:
Cloud - IaaS
•
Networking
•
Saas
•
Databases
•
Web Application
Other Cybersecurity Services I Offer
FAQ
How does this work if you do not know our environment?
Send the questionnaire, plus access to any existing documentation: policies, architecture notes, your cloud console settings, and prior questionnaires. I fill the gaps with a structured intake, then draft every answer. You review before anything is submitted.
Will you just answer yes to everything so the deal closes?
No. I will not write yes for a control you do not have. Once you submit a questionnaire, it usually becomes part of the contract, and a false answer is a much larger problem than a slow deal. Gaps are answered honestly, with context and a clear path to a fix.
Which questionnaires do you handle?
SIG Core and SIG Lite from Shared Assessments, CAIQ and CAIQ Lite from the Cloud Security Alliance, HECVAT Full and Lite for higher education, VSA, and custom spreadsheets. If your customer uses a portal like OneTrust or Whistic, I work in it.
How fast can you turn this around?
5 days for up to 150 questions, 8 for up to 400, 12 for unlimited. A 72-hour rush is available on the first two tiers. The clock starts when your intake answers come back, so respond quickly, and it moves faster.
What happens when the honest answer is no?
You answer honestly and say what you are doing about it. Enterprise security teams expect gaps from a company your size. What kills deals is a yes that unravels on the follow-up call, not a no with a date attached.
Do you submit it for us?
No. I draft the answers, and you review and submit them. You know your environment, and you are the party making the representation. My name does not appear unless you want it to.
What is the answer library?
A structured document holding every answer, its source, and the evidence behind it. The next questionnaire is answered by mapping to what is already written rather than starting over. It is the Premium tier, and it is why most people pick it.
Can you fix the gaps you find?
Not in this package. I can identify what is missing and what it would take. Building policies, running an assessment, or writing a security program are separate engagements, and I will quote them rather than bundle them while you are under a deadline.
Our customer wants a SOC 2 report. Can you provide one?
No. A SOC 2 report comes from a licensed CPA firm after an audit period and I am not one. Many questionnaire answers reference SOC 2, and I answer those honestly, including saying you do not have one yet. If that is blocking the deal, we should talk about what would unblock it.
We keep getting these. Does it ever stop?
Most companies get two or three of these per enterprise deal cycle. That is exactly what the answer library is for. Order Premium once, and the follow-up questionnaires become an hour of your time instead of two weeks of your CTO's.
