Observations about questionnaire responses, unsupported claims, and what assessment work is needed beyond the answer.
Questionnaire
+3
Oct 28, 2026
•
2 min read
A vendor may have AI across its product portfolio, but the assessment should start with the specific AI functionality actually being used in the relationship.
Oct 7, 2026
A question may not fit the vendor’s environment, but that does not always mean the underlying control responsibility disappears.
Validation
Sep 16, 2026
A vendor extension request made me question why evidence-based assessments so often begin with another round of manual questionnaire work.
+4
Sep 1, 2026
3 min read
I built a validator to see how much of the evidence review can be assisted while keeping the assessment decision with the assessor.
