Customer security questionnaire pack
An editable spreadsheet of about 30 questions customers commonly ask machine builders about remote access, grouped by topic (access control, authentication, logging, vulnerability handling, incident reporting, subcontractors, data, and documentation). Each row has the question, why a customer is likely asking it, and the kind of evidence worth having ready, plus a blank column for your own answer. No suggested “compliant” answers. See the guide for the fuller explanation.
- •About 30 questions across 8 topics, each with why a customer asks it and what evidence to prepare.
- •A blank column for your own answer, with no suggested “compliant” response to copy.
- •Yours to keep and reuse for every customer who sends a security questionnaire, not just this one.
Five sample rows from the pack
| Category | Question | Why they ask it |
|---|---|---|
| Access control | Who has remote access to our systems, and how is that list kept up to date? | Wants a current, accurate inventory of who can reach their systems. |
| Authentication | Is multi-factor authentication required for remote access? | A password alone is the most commonly exploited single point of failure. |
| Logging | Are remote sessions logged? | Logs are the main way an incident gets reconstructed after the fact. |
| Incident reporting | What counts as an incident, in your process? | Without a shared definition, something significant can go unreported. |
| Subcontractors | Does anyone other than your own staff connect remotely, such as a dealer or subcontractor? | A customer's risk extends to everyone who can reach their systems, not just your direct employees. |
Get the questionnaire pack
Software Lantern will use your details to send you the file and may contact you about it by email. See our privacy policy.
Required. Please use your work email address, not a personal provider (e.g. Gmail).