Vendor answer sets

Several cloud vendors have developed standard answer sets for some of the questions in the Cloud Risk Assessment Tool (Excel 77KB).   Contact the vendor directly to obtain the answer set.  Agencies are responsible for evaluating the answers and determining whether they are relevant.  Standard answer sets exist for the following products:

  • Amazon Web Services
  • Catalyst Cloud (NZ)
  • ComplyWatch
  • ComplyWith
  • Controls Reporting (ComplyWith NZ)
  • Docebo LMS (Implemented in NZ by Bloom Learning Solutions)
  • Microsoft Azure1
  • Microsoft Dynamics CRMOnline1
  • Microsoft InTune1
  • Microsoft Office 3651
  • Opal3
  • SalesForce
  • ServiceNow
  • SkyHigh CloudTrust

As we become aware of more cloud vendor answer sets, this list will be expanded.  A product’s appearance on the list above does not indicate the product or its response set has been endorsed by GCIO.


1 Please refer to for further guidance on the adoption of Microsoft cloud services. 

Page last updated: 05/12/2016