// GLOSSARY

Client Security Review

A security-posture assessment (vendor security assessment) an organization undergoes from its customers when evaluated as a solution partner or supplier. Standard question pools such as SIG, CAIQ and VSAQ are common forms of this review. It is the trigger of the portable-assurance line (S4-A): when a customer asks 'why should we trust you, why should we entrust our data to you', the answer must be not a marketing claim but an auditable evidence package. The strategic weight of this concept comes from turning security from a cost center into a sales condition. As supply-chain risks grow, organizations now question not only their own security but the security of every supplier they work with; failing a security review means not a technical shortfall but a lost deal. So assurance is now a concern not only of the security team but of the commercial line as well. It is not the same as the audit-ready evidence package (S4-B); one tells the customer 'you can trust us', the other tells the auditor 'the legal requirement is met'.