Energy
Critical infrastructure, continuity assessed site by site, NIS2 requirements passed down the whole chain.
The same question does not mean the same thing depending on who asks it.
"How do you manage privileged access?" expects an answer anchored in a factory standard in automotive, in an operational resilience regulation in banking, and in the instructions to tenderers in the public sector. Twelve sector agents carry those differences: the vocabulary, the frameworks your evaluator cites, and the level of evidence they expect.
How a sector agent works
It does not replace the business agents, it works with them. The business agents know how to answer on security, sustainability, personal data or continuity. The sector agent decides how that answer must be phrased for this particular reader, which framework to cite, and what level of precision becomes mandatory.
On a given questionnaire, only the relevant agents are mobilised, not all 85.
The twelve
Twelve agents, anchored in a classification you do not have to take our word for.
Our twelve sector agents follow the eleven sectors of the GICS classification, the global sector standard created in 1999 by MSCI and S&P Dow Jones Indices and used across the financial industry. We add the public sector, absent from GICS because that classification covers the investable universe rather than public administrations.
The choice matters: an in-house taxonomy would be unverifiable, and a sector split invented for a brochure is recognisable at first glance. This one can be audited.
Materials
Duty of vigilance, supply chain traceability, environmental data that has to survive an audit.
Industrials
Industry assessment catalogues, security of production sites, continuity plans per plant.
Consumer discretionary
Social audits of subcontractors, retailer sustainability requirements, assessment brand by brand and country by country.
Consumer staples
Food safety, supplier traceability, frameworks imposed by large retail groups.
Health care
Health data: where it resides, who accesses it, under which hosting approval. Logging is always asked for.
Financials
DORA, NIS2, outsourcing requirements, fund DDQs. An imprecise answer creates a compliance risk, not just a poor score.
Information technology
The security questionnaire lands in the middle of a negotiation. Every enterprise account imposes its own format.
Communication services
Service continuity, personal data at scale, sector-specific obligations.
Utilities
Essential entities, separation of industrial networks, public contracts and concessions.
Real estate
Energy performance, CSRD, a chain of service providers to assess as much as to document.
Public sector
Outside the GICS scope, added because the need demands it: ITTs, PQQs, frameworks, and the response structure imposed by the buyer.
GICS is a trademark and a standard of MSCI and S&P Dow Jones Indices. Structure in force since March 2023: 11 sectors, 25 industry groups, 74 industries, 163 sub-industries. The exact composition of the agents follows the version in force in the product.
Where the line is
A sector agent does not invent your sector.
Specialisation covers the expected form and the frameworks to cite. The substance always comes from your documents. If your backup policy says nothing about recovery time, no agent will fill that in: the gap is declared, explained, and an expert is assigned to address it with you.
What happens when a document is missing →Not sure which agent applies to you?
Send us a real questionnaire from your industry. We show you live what the agents make of it, and where they stop.
Demo on your documents