Platform · Customer questionnaires

Answers to security questionnaires drawn from approved controls and evidence, with the source stated.

NIS2 (art. 21.2(d)) requires entities to manage supply chain security, which is why customers send security questionnaires to their suppliers. EVIDEVO imports the questionnaire and proposes, for each question, an answer drawn from a control, an evidence item or a previously approved answer, stating the source. Each answer is reviewed by its owner before sending and goes into the library for later questionnaires.

Let's talk Starting assessment

Data for illustrative purposes only, not real

The problem

01

A different format for every customer

Hundreds of questions in spreadsheets and portals, each with its own structure.

02

The same answers, rewritten

Questions are similar across customers, yet answers are written from scratch each time and may not match.

03

Contracts and renewals on hold

The questionnaire is often a condition for signing or renewing: until it is closed, the deal does not move.

What it does

Answers to customer security questionnaires, drawn from approved controls and evidence.

  • Questionnaire import

    The customer's file is uploaded in its original format. Questions are recognised and organised by section.

  • Answers linked to controls

    Each proposed answer states its source: control code, evidence, policy or previous answer.

  • Answer library

    Approved answers form a reusable library for later questionnaires.

  • Review and approval

    Each answer goes through its owner before sending. No answer goes out without confirmation.

  • Evidence shared with limited access

    Attachments are accessible only to the customer who requested them, with an access expiry date.

  • Deadlines per customer

    Each questionnaire has a due date, a progress status and the number of questions still unanswered.

The outcome

  • Answers drawn from previously approved controls and evidence, with the source stated for each
  • A library of approved answers, reusable for the next customer
  • For each answer sent: who approved it and when

Related frameworks

Other capabilities

A thirty-minute presentation based on the organisation's scope.

It starts from the frameworks in scope and how the work is organised today. In thirty minutes, EVIDEVO is shown working in that context.

Let's talk