The VSA issues two free questionnaires, which will be updated annually:

VSA-Full: This is the classic VSA questionnaire which focuses deeply on vendor security. It is used by thousands of companies globally.

VSA-Core: This questionnaire, first available on October 24th, 2019, comprises the most critical questions on vendor security in addition to privacy. The privacy section covers both US Privacy (data breach notification requirements plus the new California data privacy law (CCPA)), plus EU Privacy (General Data Protection Regulation (GDPR)).

VSA members also gain access to our hosted questionnaire so their vendors may complete it easily.