Security questionnaires
The questionnaire blocking your deal, completed properly
Send us the form. We map every question to the controls you actually have, draft the answers with evidence attached, and hand it back ready to send.
Flat rate whatever its length
- SIG Lite
- SIG Core
- CAIQ
- VSAQ
- Bespoke enterprise forms
What’s included
Everything in the price
- A full read of the questionnaire before we quote, so nothing is a surprise once we start
- Every question mapped to the controls and evidence you already have
- Answers drafted in your voice, with supporting evidence attached
- Genuine gaps flagged and ranked by what actually unblocks this deal
- One revision round after the customer's security team comes back
- A reusable answer library and evidence pack, yours to keep
Why it gets easier
The aim is that you need us less each time
Most vendors in this space are happy for you to face the same scramble every quarter. The work we do after the first questionnaire is designed to remove it.
The first one is a rescue
There is a deadline and a deal behind it. We complete the questionnaire from the controls you have today, and we are honest where the answer is 'no'.
The gaps are now written down
Every 'no' and 'partially' is a gap you can see, in your own words, ranked by whether it actually blocked this deal. Nobody had to sell you an audit to find them.
We close the ones worth closing
Policies where there were none, controls where the answer had to be no, and an evidence pack that is maintained rather than reassembled each time. Quoted separately, once you've seen what matters.
The next one is retrieval, not research
With an answer library and current evidence, the third questionnaire takes a fraction of the effort of the first — and you can do more of it yourself each time.
What’s not included
Where we stop
Being specific about the limits is cheaper for both of us than discovering them halfway through.
- Penetration testing, or anything requiring CREST or CHECK accreditation
- Signing off answers as an independent auditor — we draft, you review and submit
- Certification itself. We are not a certification body
Questions
The things people ask before saying yes
- How fast can you turn one around?
- Three to five working days for a short form, five to ten for a full one. If your deadline is tighter than that, say so in the first email and we will tell you honestly whether it is possible rather than agreeing and missing it.
- What if we don't have the controls a question asks about?
- Then the honest answer is 'no' or 'partially', and that is what we write. Inventing a control is how you fail the follow-up evidence request and lose the deal later, with less goodwill than if you had simply said no. We flag the gap and rank it by whether it actually blocks this deal.
- Whose answers are they?
- Yours. We draft, you review, you submit. You keep the answer library and the evidence pack, which is what makes the next questionnaire cheaper for you whether or not you use us again.
- Do you handle a customer's own bespoke form?
- Yes, and most enterprise buyers use one. A bespoke spreadsheet is more common than any of the standard frameworks, and the work is the same: map each question to what you genuinely have.
- Is the price really flat regardless of length?
- Yes. If we find that stops making sense we will change the published price rather than surprise you part-way through an engagement.
Tell us what you're up against
Describe the situation in a couple of lines. We'll tell you straight whether we can help, what it would cost, and how long it would take.