Comment by wgyn

Filling out questionnaires is such a time suck. It's extra painful because different companies use different standards (CAIQ, SigLite, VSAQ). Hopefully they solve the near-term questionnaire problem, but I'm also excited to see them eventually tackle the underlying problem—we want to prove to potential customers and users that we take security seriously, but right now it's prohibitively tedious and time-consuming to do so.