It is normal to encounter questions that feel unexpected or unfamiliar. Before assuming a question does not apply to your company, it is worth understanding why it is there.
Why your questionnaire looks the way it does
Your questionnaire is customized based on three things: your company's sector, your company's size, and the answers you provided during the qualification questionnaire. Only questions relevant to your specific context are included, so if a question appears in your questionnaire, it is there because our system determined it is applicable to a company like yours.
If a question feels unfamiliar
Some questions may relate to security practices your company has not yet implemented. This is a valid and expected outcome: the assessment is designed to identify gaps as well as strengths. In these cases, answer honestly: select the options that reflect your current situation and upload whatever evidence you have, even if it is partial.
Each question includes built-in help content displayed directly beneath the question text, with additional guidance available under each individual control. Read through this content carefully before deciding a question does not apply, it often clarifies what is being asked and what evidence is acceptable.
See [How to understand a question: using the built-in help content] for more detail.
If a question genuinely does not apply to your company
If after reading the help content you still believe a question is not applicable to your company's context, do not skip it. Instead:
Select the option that most closely reflects your situation
Use the comment field to explain why you believe the question does not apply
Upload any supporting documentation that supports your explanation
Our analysts will take your explanation into account during the review.
If you think your questionnaire needs to be adjusted
If you believe a significant number of questions are irrelevant, which may indicate an issue with your scope or sector classification, contact your account manager or account.management@cybervadis.com before proceeding.
They will review your questionnaire configuration and advise on next steps.
See also [What is the assessment scope?] to check whether your scope may need to be corrected.