How to answer 'Is source code protected against unauthorized exfiltration?' on a SIG Lite
I. Reviewer Guidance & Pitfalls
Describe GitHub SSO, mandatory 2FA, IP allowlisting for git access, and disabled public forks.
II. Example Answer Passing Enterprise Audit
Compliant Response
Sealed · TVM-15
Code repositories enforce SSO with mandatory MFA, disable public repository creation, and audit all clone/download activities (SOC 2, CC6.1).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
No spam · No credit card · Confidential by default