Tag: vendor security assessment

I have spent years watching organizations waste thousands of hours on vendor security assessments that produce nothing but noise. They send out hundred-question questionnaires. They demand SOC 2 reports. They ask for ISO certifications. They request NIST maturity scores. And at the end of all that paperwork, they still have no idea if the vendor […]