I work for a reasonably large corporate in regulated space holding client data, and yeah, our infosec are regularly sending security questionaires. They go to new vendors, or existing vendors when we plan to purchase something new from them. I believe they’re reviewed periodically as well.
No one likes wasting time filling out forms, but in large businesses, theres a need to ensure the whole service (incl. subcontractors/vendors/data processors) are operating properly. So yeah some confirmation is needed... 200 page docs though? Geez. I think ours is ~15.
No one likes wasting time filling out forms, but in large businesses, theres a need to ensure the whole service (incl. subcontractors/vendors/data processors) are operating properly. So yeah some confirmation is needed... 200 page docs though? Geez. I think ours is ~15.