Yes, there's a deep culture of questionnaires and dubious "scans" in the security industry. It's all we got because nobody is actually allowed to kick the tires

Yes, there's a deep culture of questionnaires and dubious "scans" in the security industry. It's all we got because nobody is actually allowed to kick the tires. Nobody is allowed to actually test the security of the systems they rely on.