A Respondent's Guide to the Cye Platform Questionnaire for Private Equity

Why This Questionnaire Matters

This questionnaire captures security details about an organization, internal policies, manual processes, and operational practices that automated assessments cannot reach. The responses feed directly into the Cye Platform's risk model.

Accuracy of risk metrics: Automated scanners cannot detect internal controls, manual processes, or offline security practices. Without this data, risk calculations may be based on incomplete information. Thorough responses ensure that existing security measures are credited correctly in Exposure and Maturity scores.
Audit-ready documentation: Once submitted, the questionnaire becomes a locked, read-only record of your answers and evidence, viewable at any time from the Cye Platform.

Questionnaire Access & Scope

Respondent Eligibility: Primary respondents must have an active Cye Platform account before an assessment can be assigned. Unregistered individuals cannot be selected.
Access: Once assigned, the respondent receives a secure email from the Cye Platform with a unique link leading directly to their questionnaire.
Platform Scope: The questionnaire is managed and completed entirely within the Cye Platform.

Filling Out the Questionnaire

Questions are organized by security domain to ensure a structured review of organizational controls.

Collaboration : Primary respondents can invite a colleague from the same subsidiary/portfolio company to help answer a specific question. The colleague receives an email invitation with a link that takes them directly to the assigned question. Their access is strictly scoped to that single question—they cannot view any other questions, answers, or parameters within the questionnaire.
Evidence Collection : Some questions require supporting documentation, such as policy files or certifications, to validate security claims. Documents are uploaded directly to the relevant question.
Saving Progress: Progress is saved automatically. Respondents can exit and return to the questionnaire at any time — all work is preserved between sessions.

Submitting the Questionnaire

Validation: All mandatory fields must be completed before the system permits submission. Non-mandatory questions can be left blank.
Submit: Selecting Submit locks all answers.

From Submission to Risk Model

Once the questionnaire is submitted, the data is reviewed by the Cye Delivery Team and incorporated into the Cye Platform:

Export Generation: Upon submission, the system automatically generates a structured data export containing all responses and associated supporting evidence for the Cye Delivery team.
Processing: Answers are converted into standardized security data, including Findings, Processes, and Technologies, within the Cye Platform. These entities feed directly into the organization's Exposure, Maturity, and Cost of Breach calculations.
Outcome Visibility: The generated entities appear inside the Cye Platform under Operations. Findings populate the Findings page, while Processes and Technologies populate the Assets page.