Guide
Preparing for a customer security questionnaire without panic
How to answer bank and retailer information-security forms with evidence folders instead of last-minute guesswork.
Enterprise buyers in South Africa increasingly attach security and privacy questionnaires to supplier onboarding. The questions look technical, yet most answers hinge on organised evidence: policies, training records, backup confirmations, and vendor lists.
Create a shared folder named for the year and the buyer type—retail, banking, logistics—so you are not hunting emails under deadline pressure. Store the latest acceptable-use policy, induction slides, and screenshots of MFA settings where they exist.
When a question asks whether you encrypt data at rest, answer for the systems that hold personal information, not every laptop in the building. Precision builds trust; over-claiming creates audit trouble later.
If a control is planned but not live, say so and attach the remediation date from your readiness roadmap. Buyers often accept a timed plan more readily than silence or vague assurances.
Gap analysis workshops help leadership agree on one answer set before three departments send conflicting replies. That single voice is usually what shortens the questionnaire cycle.