Questionnaire

The Questionnaire section allows you to create questionnaires for a third party based on the controls assigned to them.

Narad provides two ways to create a questionnaire:

Using AI

Use AI to generate a questionnaire based on the controls selected for the third party.

You can select the relevant controls and provide a questionnaire name. Narad then generates questions based on the selected controls.

Using Question Library

You can also create a questionnaire using a published questionnaire template from the Question Library.

Select an existing template, review its questions, controls, and domains, and use it to create a questionnaire for the third party.

This is useful when your organization has standardized questionnaires that you want to reuse across multiple vendors.

Reviewing and Customizing Questions

When creating an AI-generated questionnaire, Narad creates questions based on the selected controls.

You can review and customize the generated questionnaire before using it.

For each question, you can define:

• Question — The question that will be presented to the vendor.

• Mapped Control — The control that the question is intended to assess.

• Answer Type — For example, Single Select.

• Answer Options — The available responses for the vendor.

• Evidence Required — Specify whether supporting evidence should be requested with the answer.

You can also add new questions to the questionnaire when additional information is required.

You can edit questionnaire only if its in Draft Mode. Once its Approved, no changes are allowed

Why controls matter

Every question in a Narad questionnaire is connected to a control. This mapping helps ensure that the questions are tied to a specific security or compliance requirement rather than being treated as standalone questions.

This also allows the responses collected through the questionnaire to be used as part of the broader TPRM assessment.

Send and Review Questionnaire Responses

Once a questionnaire is created and finalized, you can send it directly to the third party for completion.

The third party can submit their responses and provide supporting information or evidence where required.

AI-Powered Response Review

Once the responses are received, Narad can use AI to evaluate each response against the passing criteria defined for the mapped control.

The AI assessment helps determine whether the response:

• Meets the control requirement

• Does Not Meet the requirement

• Requires further review or clarification

This connects the entire workflow:

Control → Questionnaire → Vendor Response → AI Assessment → Control Result

The assessment automatically update the third party's control status and identify areas that may require remediation, an exception, or additional evidence.