Panorays Questionnaires are designed to make third-party security assessments accurate, scalable, and aligned with your organization’s risk appetite.
Instead of relying on one-size-fits-all questionnaires, Panorays allows you to ask only the questions that matter to the relevant third party.
❓What are Smart Questionnaires?
Smart Questionnaires are fully customizable security questionnaires used to assess the cyber risk of third parties.
They help you:
Collect security and compliance information from suppliers efficiently
Align assessments with your internal policies, standards, and regulations
Reduce manual effort and follow-ups
Get a clear, measurable view of third-party risk
📝Questionnaire Template Libary
You can create several questionnaires in several ways, depending on your needs:
Use a built-in Panorays questionnaire template from our Template Gallery
Customize industry-standard questionnaires such as SIG or CAIQ
Create your own questionnaire based on internal company policies
Questionnaires can also reflect specific frameworks, standards, and regulations, such as GDPR, CCPA, HIPAA, or NIST, depending on the supplier’s access level and business context.
✏️Tailored questions per third party
Your company’s Questionnaire Template acts as a central repository of questions.
From there, questions can be:
Mapped to different relationships
Sent selectively, so each third party receives only the relevant subset of questions
For example, a supplier with access to sensitive customer data may receive privacy- and compliance-focused questions, while another supplier may receive a different set entirely.
📈Questionnaire scoring and ratings
Once a questionnaire is submitted, Panorays calculates a rating from 0–100 based on the supplier’s responses.
You control how that score is calculated:
Define question weighting based on internal policies and risk appetite
Assign a higher weight to critical controls or domains
Ensure scoring reflects what matters most to your organization
The questionnaire rating is one of the factors used in Panorays’ overall third-party risk assessment.
❗Important (“deal-breaker”) questions
You can flag questions as Important (also known as “deal-breaker” questions).
These questions:
Have a higher impact on the supplier’s overall risk rating
Help quickly identify non-compliance with internal policies
Trigger notifications when a supplier responds out of policy
This allows you to focus attention on high-risk gaps immediately.