How do vendor security reviews influence technology purchases?

ArchitectureStrategy

None, we don't perform vendor security reviews6%

Very little, our vendor reviews are mostly a box-checking exercises37%

Sometimes vendor security reviews delay purchases but they don't change outcomes29%

Vendor security reviews break ties between equal vendors15%

Vendor reviews make security a key buying criteria12%

289 PARTICIPANTS
2.2k viewscircle icon1 Comment
Sort by:
Director - Architecture and Digital Transformation in Software4 years ago

We have an App Sec and Architecture review as an integral part of Vendor evaluation. This allows us to categorize vendor based on security score and also keep technical debt very low

Lightbulb on1

Content you might like

How do you get your team excited and motivated to take on a massive new project? Aside from sharing details, goals and steps, do you have a strategy for helping your team feel truly engaged?

Read More Comments

What advancements in artificial intelligence are anticipated for 2025?

Read More Comments

We’re currently evaluating alternative Microsoft Licensing Solution Providers (LSPs) due to ongoing dissatisfaction with our current partner under our Enterprise Agreement (EA). As we look to make a change, we’re hoping to learn from others in the community who have navigated similar transitions. We’re particularly interested in your experiences with: • LSPs that provide more than just transactional value — Have you worked with an LSP that offered strategic guidance, proactive support, or added value beyond licensing fulfillment? • Partner delays due to LSP involvement — Have you encountered inefficiencies or delays when your consulting partner had to coordinate through an LSP? How did you address this? • Hybrid approaches — Has anyone adopted a model where the LSP handles licensing while a separate consulting partner provides strategic or technical support? How has that worked in practice? Any recommendations, red flags, or lessons learned would be greatly appreciated. We’re aiming to ensure we’re getting the best support and strategic alignment possible moving forward. 

How would you describe your dominant approach to the implementation of individual applications, projects, and workloads in the cloud?

Rehost16%

Refactor58%

Rearchitect18%

Native New Build8%

View Results

What is your preference when choosing a DDoS mitigation service?

Always-on service32%

On-demand service – traffic is scrubbed only when an attack is detected and mitigated66%

One time use – service is activated upon request1%

View Results