# Security questionnaire review worksheet

Thonis Systems | https://thonissystems.com/resources/security-questionnaire-checklist

Free working template for B2B software and service suppliers. Keep populated copies in your own approved workspace. Do not email sensitive evidence with an initial inquiry.

This worksheet is not an assessment, certification or guarantee of buyer acceptance.

## 1. Review scope

- Buyer review reference:
- Exact product or service:
- Environment and relevant data flow:
- Buyer use case:
- Required format and return channel:
- Deadline (include time zone):
- Response owner:
- Accountable response approver:

## 2. One question and its evidence

Duplicate this section for each difficult question. Preserve the buyer's wording.

- Question reference and exact wording:
- Proposed answer and its precise scope:
- Evidence reference (use an approved location; do not copy secrets here):
- Source version or date and evidence owner:
- Why the evidence applies to this product and use case:
- Limitation or exception:
- Evidence status: supported / partially supported / unsupported / applicability unknown
- Missing fact or clarification:
- Person responsible for the next action:
- Next action and due date:
- Proposed remediation (separate planned from completed work):

## 3. Approval and return

- Final answer version and attachment references:
- Remaining limitations disclosed in the required format:
- Authorized reviewer and approval reference/date:
- Approved recipients and sharing restrictions:
- Returned version, channel and date:
- Delivery acknowledgement, if one exists:
- Buyer decision, if separately confirmed (otherwise unknown):

Delivery acknowledgement does not mean acceptance. Do not turn a planned fix into a completed control or a missing fact into a yes.

## 4. Follow-up

- Buyer's follow-up questions and owner:
- Agreed conditions and review dates:
- Service or evidence changes that should reopen this answer:
- Reassessment owner:

## Need help with a difficult answer?

Review the Buyer Security Review Exception Sprint:
https://thonissystems.com/commercial

Start with a free written fit review; calls are optional:
https://thonissystems.com/start?product=assuranceops&from=%2Fresources%2Fsecurity-questionnaire-checklist&intent=buyer-review

Describe the workflow, deadline and response owner without sensitive attachments. Paid work begins only after agreement on scope, fee and acceptance criteria.