The Impact of AI
on the Future of
Security Questionnaires
What 300,000+ security questionnaire questions answered by Conveyor’s AI tell us about the future of security reviews
A 2024 Predictions Report by
What 300,000+ security questionnaire questions answered by Conveyor’s AI tell us about the future of security reviews
See data insights + opinions from experts in infosec & presales
Companies continue to send custom, increasingly detailed questionnaires
Dig into each of these predictions
“I’m gonna say that’s a 4. It is VERY painful.”
“A 3. Even if software makes it easier, it’s still overall a horrible task.”
“I’ll say maybe a 3, but that’s just the nature of maintenance.”
Based on the 300,000 questionnaire answers processed in Conveyor, here’s what we know...
Most companies struggle with maintaining an “effective” knowledge base.
Based on the 100k security document downloads in Conveyor, here’s what we know...
of customers still sent a questionnaire even after accessing information in the trust center
Will a trust center deflect a questionnaire?
Conveyor answered the most questionnaires for companies in these industries in 2023.
“In my pipedream, it will be phased out because more and more companies are leaning toward automating and exposing as much information for self-serve as possible.
However, I suspect that with AI becoming more prevalent that companies will feel more empowered to send large questionnaires since they won't feel like they are wasting anyone's time. Maybe when it comes back, they'll have their AI review it and pull out red flags.
Ultimately, it will just be robots talking to each other.”
“It will be a simple prompt UI for customers - like extremely minimalist and delightful. One-click form completion.”
Based on the 300,000 questionnaire answers processed in Conveyor, here’s what we know...
Conveyor's most successful customers were able to achieve on average:
reduction in time spent
on questionnaires
Survey results
If it was possible, would you want your smaller customers to self-serve answers to their questionnaires using AI, such that the only questionnaires you do by hand are for larger or high-value customers?
“No. Despite gains in AI accuracy, I do not see it reaching a point where we would rely on it completely.
We would not want an incorrect response being provided to any customer, large or small, given there could be commercial or regulatory implications to providing incorrect information.”
"Yes. In my role, nothing feels like a bigger waste of time than completing/reviewing a questionnaire for a small opportunity."
“Even more questionnaires with even more requests for details confirming the answers are implemented.”
“It still helps to have them because certifications can't cover all and they are out-of-date (agreed on, approved) by default ... so knowing specifics relating to the use case is needed.”
“Difficult to know. In some industries there may be a standardization on third party review organization to leverage a single review across multiple customers. That said, this hasn't gained traction yet [...] I think questionnaires will continue to exist for some time. They will grow in complexity and variability.”
From the 300,000+ questions processed by Conveyor’s AI, here’s what we know...
Types of questionnaires completed using
Conveyor's questionnaire software in 2023
Questionnaire formats completed using Conveyor's
questionnaire software in 2023
Portal-based questionnaires completed using Conveyor's
questionnaire software in 2023
The average questionnaire is 80 questions give or take, but if you sell to industries like telecommunications or legal, you can expect significantly more.
Questions about your security posture likely won't go away anytime soon.
Although we're not at full automation yet, here are some practical tips
to use when automating your customer security reviews today:
AI for security reviews is converging towards just needing one source of truth to generate answers with.
Being able to identify what the most popular documents are and which are the top question and answer pairs to maintain will become increasingly important.
Have a trust center or looking to implement one? Leveraging a trust portal makes documentation sharing automated and centralized for your team.
Pro tip: Make sure sales is bought in early. This makes adoption, push back on customers, and future deflection of questionnaires possible.
Design processes so that Sales/Solutions Engineers can be the first line of defense when sharing info via a trust center, but also when taking a first pass of the questionnaire using AI.
Need somewhere to start? If you already have a security questionnaire automation software, try having sales upload questionnaires via Salesforce.
Evaluating an AI solution to automate answering security questionnaires?
Pro tip: Use these key metrics in your evaluation.
See how the most accurate AI on the market for security questionnaire automation can help you reduce time spent on questionnaires by 91%.
Try the AI in a free proof of concept.
