How to answer 'How do you ensure deprecated cryptographic algorithms (e.g., DES, RC4) are never used?' on a SIG Lite
I. Reviewer Guidance & Pitfalls
Explain automated code linting rules and TLS policy enforcement blocking weak ciphers.
II. Example Answer Passing Enterprise Audit
Compliant Response
Sealed · CEK-16
Automated SAST scans detect and reject deprecated cryptographic libraries in code; load balancers refuse connections using legacy ciphers (SOC 2, CC6.1).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
No spam · No credit card · Confidential by default