I work in this space. This is only going to continue this way. Companies are increasingly worried about their data, both from a reputation standpoint and a lega

I work in this space. This is only going to continue this way. Companies are increasingly worried about their data, both from a reputation standpoint and a legal standpoint. Even with a SOC2, many companies will simply issue a questionnaire out of policy. It cost them nothing. My biased answer is to use one of the SaaS products that automate this (I work for one). If you don’t want to use a 3rd party, they do become easier over time. They’re still a mental drain to do manually, but you’ll find patterns in the questions that you’ll learn to answer pretty easily.