Despite the well-known shortcomings of security questionnaires, companies continue to rely on them as a primary method for assessing vendor security.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Companies face delays and missed opportunities due to the time-consuming nature of completing security questionnaires, which are often seen as a formality rather than a true assessment of security posture.
Industries affected
All industries are affected as the use of security questionnaires is ubiquitous in business-to-business (B2B) transactions.
Users affected
Security and GRC teams are burdened with the task of completing these questionnaires, often at the expense of other important work, while the answers provided by vendors are relied upon despite their perceived lack of rigor.
