Answering customer security questionnaires
SMEs, software companies and service providers in Switzerland, Germany and Austria that supply regulated companies.
Updated: 2026-11
Under NIS2 and DORA, large customers must assess their suppliers’ security and send extensive questionnaires to do so. We help answer them honestly and completely, compile the evidence required and build an answer library so the next questionnaire takes hours rather than days.
A security questionnaire with a hundred or more questions often lands with management or a single IT person, on top of daily work. Questions are interpreted inconsistently, evidence is missing, and embellished answers become a risk later when the customer writes them into the contract.
With a sound foundation, questionnaires become routine, and real gaps become visible before a customer finds them.
What you get
Completed questionnaire
Complete, honest answers to the current questionnaire, agreed with your owners.
Evidence pack
Policies, concepts and records customers typically request, in one place and up to date.
Answer library
Standard answers to recurring questions on NIS2, DORA, ISO 27001 and data protection.
Gap list
Questions you cannot answer positively today, with proposed measures by priority.
How it runs
- 01
Review
Review the questionnaire and existing documents, collect open points.
- 02
Interviews
Short conversations with IT, management and providers to clarify facts.
- 03
Answers
Draft answers, link evidence, name gaps openly.
- 04
Library
Store answers and evidence in a structured way for future questionnaires.
Price framing
Per questionnaire by scope; building the answer library as a one-off package.
Indicative, not a binding quote — the frame is confirmed during scoping.
Parent service: Cyber readiness & IT security
FAQ
Do you make answers look better than they are?
No. Embellished answers become contractual duties and, in an incident, a liability risk. We write honestly and show how gaps will be closed.
Do Swiss suppliers have to meet NIS2?
Not as law, but through contracts with their EU customers, who must demonstrate the security of their supply chain.
Does ISO 27001 certification help with questionnaires?
Often yes, because it covers many questions. Some customers still ask for details beyond the certification.
Answering customer security questionnaires
SMEs, software companies and service providers in Switzerland, Germany and Austria that supply regulated companies.