One of the more interesting projects we worked on recently involved a small professional services organisation rolling out a new client intake and workflow platform across several offices. The project itself looked fairly ordinary at first glance. Online forms, document uploads, automated notifications, reporting dashboards — the sort of thing organisations implement every day. The
We encounter vendor security questionnaires constantly and, to be fair, they are a decent place to start. A good vendor security questionnaire forces suppliers to explain where they store information, who can access it, whether subcontractors handle the data and what security controls they claim to operate. That is useful. Vendor security questionnaires work far
