Generate CAIQ

Upload the official CAIQ questionnaire and get the same file back filled with your self-assessment answers. The platform does not distribute the instrument — you bring the file.

Fill descriptions with Ara

Where you host

Declare where the organization hosts. Running on a third-party IaaS (AWS/GCP/Azure/OCI) lets the CAIQ datacenter physical-environmental questions inherit as "Yes / Third-party outsourced" — the provider implements them and you stay accountable.

Version

v4.1 is current and submittable to the STAR Registry. v4.0.3 is valid until December 2027. Choose by continuity: v4.1 if you're starting now, v4.0.3 if you already have a listing on it.

Coverage by domain

Loading…

The CAIQ mapping is Aranis interpretation — there is no official CCM↔NIST CSF crosswalk. Review the answers before submitting under your organization's name.

Official CAIQ file

Download the questionnaire from the official source (CSA STAR) and upload the .xlsx here. The version is detected automatically.

Select .xlsx file

Review and attestation

Generating the CAIQ produces a self-assessment your organization publishes under its own name in a public registry. Confirm you reviewed the filled answers.

I reviewed the filled answers and attest that they represent my organization's posture.