5 ms·
"Once your sales starts selling to large customers, they would report back on compliance requirements and certifications related to security." And get ready fo
by twakefield 10y ago
"Once your sales starts selling to large customers, they would report back on compliance requirements and certifications related to security."
And get ready for the questionnaires, each different enough to maximize the time spent on them. The Vendor Security Alliance[0] is attempting to standardize them. Although, I'm not sure how much uptake it's getting. At a minimum, it's a good example of a typical questionnaire.
[0] https://www.vendorsecurityalliance.org/ https://www.vendorsecurityalliance.org/
- ryanmarsh 10y agoI don't see how any small company could provide a sufficient response that questionnaire at a reasonable cost in a reasonable amount of time. I'm not saying security isn't important. Just that looks like a lot of money down the drains.
- intrasight 10y agoFirst, with modern SaaS platforms, it's not that hard to do security right. Seconds, it's not like you can say "no, I'm not going to fill out your questionare".