A security compliance questionnaire is a document that organizations use to determine whether its vendors are complying with certain security standards. Security compliance questionnaires are typically administered annually or periodically and are completed by vendors themselves. While security compliance questionnaires provide valuable data on the internal security controls of a vendor, they aren’t able to provide year-round monitoring of a vendor’s security posture, or alert security teams when changes happen within their network. Consequently, many organizations seek tools like Bitsight Security Ratings that can offer continuous monitoring of vendors’ security performance and compliance, and provide automated alerts when risks are present.