Questionnaire
Noun · Security & Infosec
Definitions
A structured set of questions used to gather information about a vendor's, product's, or internal system's security controls, practices, and compliance status. Security questionnaires are useful for screening and documentation, but they are not substitutes for evidence, testing, or validation.
In plain English: A list of security questions used to assess a system, vendor, or process.
Example: "The vendor's questionnaire claimed strong encryption everywhere, but the follow-up review showed several exceptions in backup handling."