> In my experience, the larger organizations will have a "security" questionnaire required of their vendors, and the person administering it is a droid, incapab

> In my experience, the larger organizations will have a "security" questionnaire required of their vendors, and the person administering it is a droid, incapable of evaluating whether the questions, originally written in the mid-00s and only updated for buzzword compliance since, are applicable to modern security practice today,... They may be even aware, they are just bound by their companys ruleset...