Comment Comment by xtracto That's wat certifications are supposed to be used for (PCI, SOC2, ISO27001). But even if your company has them, some businesses want you to fill these horrendous questionnaires. parent xtracto 5 years ago