Best fit
A copied security answer can remain fluent while its scope, evidence, numbers, negation, or approval status has silently changed.
// Security & Compliance
Security Questionnaire Answer Drift Auditor
Compare incoming security questionnaire answers with an approved library for stale evidence, scope mismatch, dropped citations, and material wording drift.
What problem does Security Questionnaire Answer Drift Auditor solve?
A copied security answer can remain fluent while its scope, evidence, numbers, negation, or approval status has silently changed.
Use it to
- Review a customer security questionnaire before human approval
- Catch stale evidence and copied answers from the wrong product scope
- Audit AI-assisted edits against approved language
- Create an owner-routed exception ledger without buying a full platform
What it returns
- Question-level drift findings CSV
- Approval and evidence lineage ledger
- JSON BLOCK, REVIEW, or READY gate
- Human-review memo with owner routing
A representative input and result
input Approved answer: backups are encrypted, evidence reviewed 2026-06-10, scope SaaS-US. Incoming answer: all backups are always encrypted, no evidence reference, scope SaaS-EU.
result Gate: BLOCK. High: scope mismatch, dropped evidence, and new absolute wording. Route to the named control owner before approval.
Access and approval boundaries
- Read access to user-supplied local CSV and JSON files.
- Write access only to the selected local audit output directory.
- No questionnaire platform, browser, network, credential, or environment-variable access is required.
Known limitations
- Version 1 uses deterministic conservative heuristics and cannot determine whether a changed claim is true.
- Question-to-library mappings must be supplied or use matching documented identifiers.
- READY_FOR_HUMAN_APPROVAL does not certify a control, contract, legal position, or compliance status.
// choose with context
Is Security Questionnaire Answer Drift Auditor the right skill?
It returns
Question-level drift findings CSV. Approval and evidence lineage ledger.
Do not use it as
It does not invent security claims, auto-submit a questionnaire, or certify compliance.
Compatibility, access, version, and licence
- Reads or accesses
- Declared local scope: questionnaire-input/**, questionnaire-audit/**, *.csv, *.json.
- Compatibility
- Documented CSV schemas for approved-answer libraries and incoming questionnaires. A JSON policy defining evidence-age and drift thresholds. Python 3 on Windows, macOS, or Linux.
- Version
- 1.0.0
- Licence
- Review the package licence and seller terms at the linked destination.
Questions
Does it answer questionnaires for me?
No. It audits incoming answers against your approved source library.
Does it certify that an answer is true?
No. It checks lineage and drift. A control owner must verify truth.
Can it review AI-assisted answers?
Yes, when the incoming answers are normalized to the documented CSV schema.
What counts as evidence drift?
Examples include stale or dropped references, scope mismatch, changed numbers or negation, new absolutes, and material wording change.
Does it need Vanta or another platform?
No. It works from local CSV and JSON files.
Can I change the evidence-age threshold?
Yes. The supplied policy JSON controls evidence-age and wording-drift thresholds.
Security Questionnaire Answer Drift Auditor keeps proof and approval boundaries visible.
The listing includes the tested package, realistic samples, declared permissions, and known limitations.
Get Security Questionnaire Answer Drift Auditor on Agensi