Index/Guides/ CAIQ v4◆ DSP-15

How to answer 'Are production databases protected against unauthorized export or bulk download?' on a CAIQ

I. Reviewer Guidance & Pitfalls

Explain database query limits, egress firewalls, and audit alerts on mass data export.

II. Example Answer Passing Enterprise Audit

Compliant Response Sealed · DSP-15
Database access is restricted to application services; direct database exports require executive approval and generate audit alerts (SOC 2, CC6.1).

Filling out a CAIQ or SIG Lite right now?

QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.

No spam · No credit card · Confidential by default