Attack Surface Questionnaire | FAQ

What is the Attack Surface Questionnaire?

The Attack Surface Questionnaire consolidates Section A of the CyberGRX assessment into a concise questionnaire that can be completed by third parties completely separate of their CyberGRX assessment. The eight questions in the Attack Surface Questionnaire allow third parties to verify the physical and digital footprint of their company across eight areas to help determine their surface area and probability for attacks.

What happened to Section A of the assessment? 

Because the Attack Surface Questionnaire is an updated and optimized version of the same business background questions found in Section A of the CyberGRX assessment, Section A has been removed. The removal of Section A from the assessment should have no impact on third parties that have assessments that are completed, in progress or not started yet. 

What's the benefit of completing the Attack Surface Questionnaire?

Company background information can now be provided independent of the assessment, meaning that third parties can provide background information about their company prior to their assessment being completed. 

Where can I find the questionnaire?

The questionnaire can be found at the top of the Company Information tab on the My Company Profile Page.

Can I update my responses once I've submitted them?

Yes! This functionality was added in June 2023. Simply click the Edit button from the Attack Surface Questionnaire card on the My Company Profile Page to be taken to your questionnaire. From there, you can change any of your previous responses and re-submit the questionnaire. 

Where can I view the Attack Surface responses that were submitted?

Attack Surface information that has been submitted is not currently available to view in platform for third parties or for customers looking at third parties in their portfolio. Responses to these questions were not viewable when they were part of Section A of the assessment, however, this capability may be added with future enhancements to the Attack Surface Questionnaire.