Guidance · Situation

A customer sent a 300-question questionnaire

A deal is waiting on your security answers.

Why this moment is hard

Sales wants it back this week, and every answer can become a contract term. Answers that drift from last quarter's, or promise more than you do, cost more later than a slow reply costs now.

5 Guidance questions3 pack documentsAbout 2 h 25 min of reading in all

This is a reading path, not a checklist. Nothing is ticked off or saved, and you can start at any step.

First, the decisions

Guidance · Third parties and suppliers
How do we decide whether to answer a questionnaire in full, point to a certificate, or decline?
7 decision points · about 10 min to read
Why here First decide whether to answer in full, point to a certificate, or decline.
Guidance · Third parties and suppliers
How do we answer a customer's 300-question security questionnaire consistently?
8 decision points · about 15 min to read
Why here How to answer consistently, question by question.
Guidance · Third parties and suppliers
How do we decide who approves our answers to a customer's security questionnaire before we send them?
8 decision points · about 10 min to read
Why here Who signs off before anything is sent.
Guidance · Third parties and suppliers
How do we build and keep a library of security answers we can reuse?
6 decision points · about 10 min to read
Why here Keep the answers so the next questionnaire takes days, not weeks.
Guidance · Third parties and suppliers
How do we write a customer-facing security overview that answers most questionnaires before they arrive?
7 decision points · about 10 min to read
Why here The overview that answers most questions before they are asked.

Then, the documents

Matrix / Catalogue · P26-A04
Security Answer Library
Security Questionnaire & Due Diligence Response · about 35 min to read
Why here Approved standard answers by topic, with evidence references.
Checklist · P26-A06
Response Quality & Over-Commitment Checklist
Security Questionnaire & Due Diligence Response · about 30 min to read
Why here Check every answer for accuracy and unsupported promises before it goes.
Template / Form · P26-A08
Customer-Facing Security Overview Document
Security Questionnaire & Due Diligence Response · about 25 min to read
Why here The customer-facing overview to send ahead of the next one.

There is no CISO Times tool for this situation yet, so the path ends with the documents.

Reading times are estimates: the words on each question's flow or document's preview at 220 words a minute, rounded up to the next five minutes. A tool shows its own time.