"But unfortunately, they’re also kinda the best we can do. Huge companies might be able to afford real human-powered security audits and convince vendors to all

"But unfortunately, they’re also kinda the best we can do. Huge companies might be able to afford real human-powered security audits and convince vendors to allow them, but small startups like ours don’t have a better option than relying on DSQs." Not what I expected based on this title. I liked this. I'm not sure how many people know about the Higher Education Community Vendor Assessment Toolkit, but if you're into Dumb Security Questionnaires, this is worth checking out. "The HECVAT is a questionnaire framework specifically designed for higher education to measure vendor risk." I know it says Higher Ed, but it works just about anywhere. https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit https://library.educause.edu/resources/2020/4/higher-educati...