The thing is, lawyers aren’t asking for these. It’s mostly security bureaucrats who approve software purchases or SaaS agreements. Someone will say, how are we

The thing is, lawyers aren’t asking for these. It’s mostly security bureaucrats who approve software purchases or SaaS agreements. Someone will say, how are we making sure that we can trust our vendors? Someone else will say, lets hire someone to put in charge of making sure we buy the right things. Someone who claims to be a security expert. A “security expert” says, we will ask them for their audit reports. As an expert, I will read them and tell you if they are secure. It’s just paper pushing.