Security Questionnaire: Fill & Download for Free

This is a very relevant question because it’s part of my team’s day to day: when an internal user proposes the usage of new SaaS software, how do we know that that SaaS company can be trusted with our company data?The historic industry approach to trying to answer this question is the ofttimes onerous practice of sending around the dreaded “security questionnaire”. I don’t think these work well — they tend to be too fluffy and focus on the wrong things. Is there a better way?In no particular order, here are some other ways to measure that I think are more useful:How big is the security team and is it composed of technical people working on the product and infrastructure or sales people filling in security questionnaires? At the end of the day, size of investment is a huge predictor of how much a company cares. If you ask this question, make sure the answer you get back hasn’t been padded!Find a vulnerability in the company’s web site or public facing internet posture. Send it in. You’ll learn a lot about the company’s maturity in how they respond. Is the response speedy? Is the response competent?Does the company have a public, transparent bug bounty program? Are the reward levels transparent and decent? Is the response time good? Has there been a decent amount of payout? (Note that counter-intuitively, low payout is a warning sign. Mature companies will calibrate their programs so they are receiving reports of value.)It’s a real red flag if a company makes it hard to work out how to report security vulnerabilities.It’s a red flag if a company’s security materials lean too heavily on compliance or features, and don’t get in to details of the underlying technology.

Yes. I believe one can go to singing using their Apple ID on Apple’s website then go Devices, I think, and then view details. Once there, you will be given the standard security questionnaire that Apple loves to do and then you can see each devices’ serial numbers accordingly. I hope this helps. Thanks.

John Bolton should have no problem getting a security clearance. His past positions have required he be cleared at TOP SECRET / Special Compartmented Information (TS/SCI).Assuming he does not already have an active clearance (which could be a possibility) should he have been a “consultant” to the Secretary of State for example, he is eligible for one.He will be asked to file his SF-86 (National Security Questionnaire, about 125 pages) with the White House Personnel Security Office. They will review for completeness and submit Bolton for a background check. Given hs prior roles, the FBI will start the process where his last reinvestigation left off.Here are a couple of pieces I crafted earlier this year on the clearance process at the White House:Explainer: Jared Kushner and His Security Clearance - ClearanceJobsThe FBI Background Investigation Process - ClearanceJobsHow Could Rob Porter Get a Security Clearance? - ClearanceJobs