When this service helps
Your SMB must complete a customer’s security questionnaire.
You have the questionnaire to complete and a contact person at your customer.
You need to separate the answers you can demonstrate from the gaps to address.
What you receive
Deliverables
- Questionnaire prepared and approved by you before submission.
- Gap analysis and list of the related evidence.
- Prioritized remediation plan.
Scope covered
- One questionnaire sent to your company by a contracting customer.
- Version, number of questions, supporting documents and deadline reviewed before the start.
- Preparation of the answers and of the remediation plan, without technical implementation.
How it works
- 01
Read the requirements
We confirm the questionnaire, its version and your deadline.
- 02
Verify the answers
We work with leadership and your IT contact to gather the evidence.
- 03
Prepare the submission
We draft the answers and the plan to address the gaps.
- 04
Obtain approval
You approve the statements before they are submitted to the contracting customer.
Your involvement
The exact questionnaire and the people who can provide the answers and their evidence.
Service limits
- No technical implementation or scanning included.
- The contracting customer remains responsible for accepting the submission.
The scope, responsibilities, recipients of the deliverables and confidentiality terms are agreed before data collection. Any change in scope is accepted in writing.
Frequently asked questions
This service helps you answer the questionnaire your customer sends you as a supplier. Assessing the security of your own service providers requires a different scope.
We prepare the answers with your contact people. An authorized person at your company approves the statements before they are submitted to the contracting customer.
The limit is flagged. We separate what is demonstrated, what remains to be confirmed and the proposed actions, without presenting a planned measure as already in place.
No. We prepare a remediation plan. Its technical implementation is not included.
No. Your customer keeps its own criteria and its acceptance decision. The length of the questionnaire and the deadline are reviewed before accepting the engagement.