We had one that was over 500 questions. And this is certainly the truth: > And no, you can't give this to an intern, or just search-and-answer most questions,

We had one that was over 500 questions. And this is certainly the truth: > And no, you can't give this to an intern, or just search-and-answer most questions, Ah, but the answer for major suppliers such as AWS and Azure, etc, is their own ISO 27001, SOC2, etc, certifications that you can defer that risk to.