Reliability, security & resilience · Core
Security questionnaire
Also called: vendor security assessment
ELI5
A form asking how a supplier protects systems and data.
Used in conversation
“Complete the security questionnaire from verified control evidence.”
Definition
A buyer or auditor's structured set of questions about security controls and risk.
Here “Security questionnaire” means: A buyer or auditor's structured set of questions about security controls and risk.
Pitch context
You will see “Security questionnaire” in product strategy decks, roadmaps, experiments and architecture reviews when the discussion reaches reliability, security & resilience.
Why it matters: In reliability, security & resilience, the scope can change what data may be used, who may access it and which controls are required.
Sources & evidence · 2
Direct term-level sources and supporting source families.
- National Institute of Standards and Technology — Computer Security Resource Center GlossaryDirect source · primary · checked 2026-08-16
- Scrum Guides — The Scrum Guide — official current versionSupporting source family · primary · checked 2026-08-16