QuestionPunkQuestionPunk
無料で始める
すべてのテンプレート
Privacy & Compliance

Security Audit & Compliance Readiness Assessment

Evaluates team-level preparedness for SOC 2, ISO 27001, HIPAA, and other compliance audits. Use this to identify control gaps, evidence retrieval challenges, and resource priorities before your next audit cycle.

このテンプレートを使うほかのテンプレートを見る

設問の例

テンプレートの内容をプレビューできます。すべての設問は公開前に自由に編集できます。

全26問・約11分
Q01
メッセージ

Welcome to the Security Audit & Compliance Readiness Assessment. This survey asks about your team's or function's audit preparedness over the past 12 months. Your participation is voluntary, and you may stop at any time. There are no right or wrong answers—we value your honest perspective. All responses will be kept confidential and reported only in aggregate to identify readiness gaps and prioritize pre-audit actions. The survey takes approximately 10 minutes to complete. If you are unsure about a question, select 'Not sure' or skip it.

Q02
選択式

Which of the following attestations or audits are expected to apply to your area in the next 12 months? Select all that apply.

  • SOC 2
  • ISO 27001
  • ISO 27701
  • PCI DSS
  • HIPAA
  • FedRAMP
  • SOX ITGC
  • GDPR
  • CCPA/CPRA
  • Other
  • Not sure
Q03
プルダウン

Which primary control framework does your area currently align to?

  • ISO 27001 Annex A
  • NIST SP 800-53
  • NIST CSF
  • COBIT
  • SOC Trust Services Criteria
  • Custom/internal framework
  • None
  • Not sure
Q04
オピニオンスケール

How confident are you that your team could retrieve all required audit evidence within 5 business days?

スケール: 1 – 7
最小:Not at all confident最大:Extremely confident
Q05
プルダウン

Approximately how many audit or compliance findings are currently open for your area?

  • 0
  • 1–5
  • 6–10
  • 11–20
  • 21–50
  • More than 50
  • Not sure
Q06
AIインタビュー

We'd like to explore your team's audit readiness challenges in a bit more depth. An AI moderator will ask you 1–2 follow-up questions based on the topics covered in this survey.

Q07
自由回答（長文）

What support or enablement would help your team most before the next audit?

Q08
プルダウン

Which function best describes your role?

  • Engineering/Development
  • IT/Operations
  • Security/GRC
  • Product/Program Management
  • Data/Analytics
  • Finance/Legal
  • HR/People
  • Other
Q09
メッセージ

Thank you for completing this assessment. Your responses will help us identify readiness gaps and prioritize actions before the next audit cycle. If you have any questions, please reach out to your compliance team.

Q10
オピニオンスケール

How clearly is the audit scope defined for your team or function?

スケール: 1 – 7
最小:Not at all defined最大:Very clearly defined
Q11
プルダウン

How would you rate the current implementation status of access management controls in your area?

  • Fully implemented and tested
  • Implemented but not regularly tested
  • Partially implemented
  • Planned but not yet implemented
  • Not applicable
  • Not sure
Q12
選択式

Where is most audit evidence or source records stored today? Select all that apply.

  • Ticketing system (e.g., Jira, ServiceNow)
  • GRC platform
  • Shared drives (e.g., SharePoint, Google Drive)
  • Version control (e.g., Git)
  • SIEM/log platform
  • HRIS
  • Asset inventory/CMDB
  • Email threads
  • Other
Q13
ランク付け

Rank the following blockers to audit readiness from biggest (top) to smallest (bottom).

  1. Insufficient staffing
  2. Unclear requirements
  3. Evidence scattered across tools
  4. Competing priorities
  5. Control gaps or coverage issues
  6. Limited tooling or automation
ドラッグして順位を付ける
Q14
自由回答（長文）

Based on your responses in this survey, is there any additional context or feedback you would like to share about your team's audit readiness?

Q15
プルダウン

Approximately how many employees are in your organization?

  • Fewer than 100
  • 100–499
  • 500–999
  • 1,000–4,999
  • 5,000–9,999
  • 10,000 or more
  • Not sure
Q16
プルダウン

Who is the primary owner of audit responses for your team or function?

  • Team lead/manager
  • Dedicated compliance/PM
  • Technical SME
  • Shared ownership (no single owner)
  • No designated owner
  • Not sure
Q17
プルダウン

How would you rate the current implementation status of change management controls in your area?

  • Fully implemented and tested
  • Implemented but not regularly tested
  • Partially implemented
  • Planned but not yet implemented
  • Not applicable
  • Not sure
Q18
選択式

On average, how long does it take your team to produce evidence once an auditor requests it?

  • Same day
  • 1–2 business days
  • 3–5 business days
  • 6–10 business days
  • More than 10 business days
  • Not sure
Q19
プルダウン

When is your next internal readiness review or dry run planned?

  • Within the next month
  • 1–3 months from now
  • 3–6 months from now
  • 6–12 months from now
  • No review planned
  • Not sure
Q20
プルダウン

Approximately how many people are in your team or function?

  • 1–5
  • 6–10
  • 11–25
  • 26–50
  • 51–100
  • Over 100
  • Not sure
Q21
プルダウン

How would you rate the current implementation status of incident response controls in your area?

  • Fully implemented and tested
  • Implemented but not regularly tested
  • Partially implemented
  • Planned but not yet implemented
  • Not applicable
  • Not sure
Q22
自由回答（長文）

Briefly describe the most significant audit risk currently facing your area.

Q23
プルダウン

Where are you primarily located?

  • Americas
  • EMEA
  • APAC
  • Other
  • Prefer not to say
Q24
オピニオンスケール

To what extent is control testing automated in your area?

スケール: 1 – 7
最小:Not at all automated最大:Fully automated
Q25
選択式

When were your key policies and standards last reviewed and approved?

  • Within 6 months
  • 6–12 months ago
  • 12–24 months ago
  • Over 24 months ago
  • Not applicable
  • Not sure
Q26
プルダウン

Approximately what percentage of your team completed required security or compliance training in the last 12 months?

  • 0% (none)
  • 1–25%
  • 26–50%
  • 51–75%
  • 76–99%
  • 100% (all)
  • Not sure

含まれる機能

  • AIによる深掘り

    自由回答に合わせてAIが追加で質問し、固定のフォームでは拾えない具体的な内容を引き出します。

  • 注意確認設問

    急いだ回答や質の低い回答者を除外する仕組みを標準で備えています。

  • AIが作成する設問文

    文言、設問の順序、条件分岐をAIが調査の目的に合わせて作成します。

  • 自動レポート

    回答が集まると、テーマ、引用、わかりやすい要約が自動で作成されます。

他ツールとの比較

ほかのアンケートツールで最も近いテンプレートを調べました。それぞれの優れている点と、このテンプレートがさらに踏み込んでいる点をまとめています。

このテンプレートを選ぶ理由

  • Includes an adaptive AI follow-up interview that probes deeper into the single most significant audit risk a respondent identifies, rather than stopping at a static list
  • Uses dropdown and opinion-scale questions to benchmark control maturity (access management, change management, incident response) alongside framework alignment (SOC 2, ISO 27001, HIPAA)
  • Captures practical readiness signals — evidence storage location, time-to-produce-evidence, open findings count, and a ranked list of blockers — to surface prioritization data, not just yes/no compliance checkboxes
  • Closes with open-text questions on support needs and additional context, plus an auto-generated report, so audit and security teams get synthesized findings instead of raw spreadsheet exports

SurveySparrow

Compliance Risk Assessment Questionnaire

This is a general-purpose compliance risk assessment template covering broad organizational risk areas rather than audit-cycle-specific readiness (SOC 2, ISO 27001, HIPAA). It's a fielding-ready static questionnaire built on SurveySparrow's conversational form format, but it isn't tailored to evidence retrieval or control-maturity scoring. Useful as a general risk-screening tool rather than an audit-prep diagnostic.

優れている点

  • Conversational, chat-style survey format that may feel more approachable than a traditional form
  • Part of a broader template library so it can be customized within SurveySparrow's editor
  • Likely supports standard branching logic and multiple question types

物足りない点

  • No adaptive AI interviewing — follow-up questions, if any, are pre-scripted rather than generated from the respondent's actual answer
  • No visible mechanism for scoring response quality or evidence-readiness at the individual-response level
  • Not specifically structured around named frameworks (SOC 2, ISO 27001, HIPAA) or audit-cycle mechanics like evidence retrieval time

QuestionPro

Vendor Security and Assessment Sample Questionnaire Template

This template is designed for assessing third-party vendor security posture rather than an organization's own internal audit readiness across teams. It's a static, fielding-ready questionnaire with security-domain question coverage, but it targets vendor risk management use cases rather than internal control-maturity or evidence-retrieval readiness. Relevant as a security-questionnaire comparator, though the audience and use case differ from internal audit prep.

優れている点

  • Purpose-built for security/vendor risk assessment workflows, a genuinely adjacent domain
  • Likely includes standard security-domain question banks (access control, data handling, etc.)
  • Part of QuestionPro's broader survey platform with logic and reporting features

物足りない点

  • No adaptive AI-driven follow-up interviewing to probe vague or concerning vendor responses in real time
  • Vendor-facing focus means it won't capture internal team-level readiness signals like evidence storage location or time-to-produce-evidence
  • No published methodology for how responses are scored or weighted for risk

よくあるご質問

「Security Audit & Compliance Readiness Assessment」テンプレートにはどのような設問が含まれていますか？

すぐに使える設問が26問含まれており、最初の設問は次のとおりです：「Welcome to the Security Audit & Compliance Readiness Assessment. This survey asks about your team's or function's audit…」・「Which of the following attestations or audits are expected to apply to your area in the next 12 months? Select all that…」・「Which primary control framework does your area currently align to?」。すべての設問は上でプレビューでき、自由に編集できます。

このアンケートの回答にはどのくらい時間がかかりますか？

回答者は通常、26問を約11分で回答し終えます。

テンプレートは編集できますか？

はい。公開前であれば、すべての設問、選択肢、順序を編集できます。設問の追加や削除のほか、調査の目的に合わせた作り直しをAIエディターに依頼することもできます。

このテンプレートは無料で使えますか？

はい。エディターで開けば、すぐに編集を始められます。お試しにアカウントは不要で、無料プランでアンケートを公開できます。

公開の準備はできましたか？

このテンプレートをエディターで開いてみてください。最初の回答者が目にする前に、すべてを自由に変更できます。

このテンプレートを使う無料で始める

関連テンプレート

似たテーマのほかの調査もご覧ください。

すべて見る
Privacy & Compliance

Account & Data Deletion Process Experience Survey

Measures user experience, satisfaction, and trust impact across the account and data deletion journey. Designed for product, privacy, and compliance teams seeking actionable feedback to reduce friction and support GDPR/CCPA requirements.

テンプレートを見る
Privacy & Compliance

Internal Audit Readiness & Process Clarity Assessment

Measures employee preparedness for internal audits, identifies gaps in guidance, tooling, and training, and surfaces priority areas for process improvement. Designed for organizations seeking to standardize audit readiness across departments.

テンプレートを見る
Privacy & Compliance

GMP Audit Checklist And Compliance Readiness Survey

A structured self-assessment for Good Manufacturing Practice audits — covering documentation, training, equipment, supplier qualification, validation, and CAPA management. An AI follow-up interview digs into the root cause behind your most significant finding, going beyond a pass/fail checklist to surface systemic issues before the next regulatory inspection.

テンプレートを見る
Privacy & Compliance

AI Governance & Risk Controls Readiness Assessment

Measures organizational readiness across AI policy clarity, approval workflows, risk tiering, and control maturity. Designed for cross-functional teams involved in AI development, deployment, or oversight.

テンプレートを見る
Privacy & Compliance

eCommerce Readiness Audit: Collateral, Training & Enablement

An internal diagnostic survey for eCommerce teams to assess collateral availability, training effectiveness, objection-handling confidence, and process friction. Designed for cross-functional respondents and yields actionable prioritization insights.

テンプレートを見る
Privacy & Compliance

Pre-Deployment Change Readiness & Risk Assessment

Assesses organizational and technical readiness for infrastructure, application, or data migrations by flagging dependency risks, evaluating rollback preparedness, and measuring stakeholder confidence before go/no-go decisions.

テンプレートを見る