Security Questionnaire Answer Drift Auditor
Compare incoming security questionnaire answers with an approved library for stale evidence, scope mismatch, dropped citations, and material wording drift.
What problem does Security Questionnaire Answer Drift Auditor solve?
A copied security answer can remain fluent while its scope, evidence, numbers, negation, or approval status has silently changed.
Use it to
- Review a customer security questionnaire before human approval
- Catch stale evidence and copied answers from the wrong product scope
- Audit AI-assisted edits against approved language
- Create an owner-routed exception ledger without buying a full platform
What it returns
- Question-level drift findings CSV
- Approval and evidence lineage ledger
- JSON BLOCK, REVIEW, or READY gate
- Human-review memo with owner routing
A representative input and result
Access and approval boundaries
- Read access to user-supplied local CSV and JSON files.
- Write access only to the selected local audit output directory.
- No questionnaire platform, browser, network, credential, or environment-variable access is required.
Known limitations
- Version 1 uses deterministic conservative heuristics and cannot determine whether a changed claim is true.
- Question-to-library mappings must be supplied or use matching documented identifiers.
- READY_FOR_HUMAN_APPROVAL does not certify a control, contract, legal position, or compliance status.
Questions
Does it answer questionnaires for me?
No. It audits incoming answers against your approved source library.
Does it certify that an answer is true?
No. It checks lineage and drift. A control owner must verify truth.
Can it review AI-assisted answers?
Yes, when the incoming answers are normalized to the documented CSV schema.
What counts as evidence drift?
Examples include stale or dropped references, scope mismatch, changed numbers or negation, new absolutes, and material wording change.
Does it need Vanta or another platform?
No. It works from local CSV and JSON files.
Can I change the evidence-age threshold?
Yes. The supplied policy JSON controls evidence-age and wording-drift thresholds.
Security Questionnaire Answer Drift Auditor keeps proof and approval boundaries visible.
The listing includes the tested package, realistic samples, declared permissions, and known limitations.
Get Security Questionnaire Answer Drift Auditor on Agensi