[xtracto]

That's wat certifications are supposed to be used for (PCI, SOC2, ISO27001). But even if your company has them, some businesses want you to fill these horrendous questionnaires.

[joetheone]

Yep. Having them now gets you a seat at the table, but (usually) does not get you out of the questionnaire entirely.