Why This Questionnaire Matters
This questionnaire captures security details about an organization — internal policies, manual processes, and operational practices — that automated assessments cannot reach. The responses feed directly into the Cye Platform's risk model.
Accuracy of risk metrics: Automated scanners cannot detect internal controls, manual processes, or offline security practices. Without this data, risk calculations may be based on incomplete information. Thorough responses ensure that existing security measures are credited correctly in Exposure and Maturity scores.
Audit-ready documentation: The questionnaire creates a permanent, timestamped record of security controls and evidence, providing a centralized repository for compliance audits and stakeholder reporting.
Getting Started
Getting Started
The assessment process begins with a secure email invitation sent from the Panorays system.
Access: The invitation contains a unique link directing the respondent to the Panorays portal.
Account Creation: No Account creation is needed.
Platform Scope: The questionnaire is completed entirely within the Panorays environment. Access to the Cye Platform is not required for respondents.
Filling Out the Questionnaire
Filling Out the Questionnaire
Questions are organized by security domain to ensure a structured review of organizational controls.
SmartMatch AI: Organizations that have completed previous questionnaires may see certain fields auto-populated based on prior answers. Pre-filled responses should be reviewed for current accuracy before submission — previous answers may no longer reflect the organization's environment.
Collaboration: Colleagues can be invited via email to contribute to the questionnaire. The invitation can include a note specifying which questions require their input. Invited collaborators to access and update the questionnaire directly in Panorays.
Evidence Collection: Some questions require supporting documentation, such as policy files or certifications, to validate security claims. Documents are uploaded directly to the relevant question.
Saving Progress: Progress is saved automatically. Respondents can exit and return to the questionnaire at any time — all work is preserved between sessions.
Submitting the Questionnaire
Submitting the Questionnaire
Validation: All mandatory fields must be completed before the system permits submission. Non-mandatory questions can be left blank.
Submit: Selecting Submit locks all answers.
From Submission to Risk Model
From Submission to Risk Model
Once the questionnaire is submitted, the data flows automatically into the Cye Platform:
Automatic Processing: Answers are converted into standardized security data, including Findings, Processes, and Technologies, within the Cye Platform. These entities feed directly into the organization's Exposure, Maturity, and Cost of Breach calculations.
Outcome Visibility: The generated entities appear inside the Cye Platform under Operations. Findings populate the Findings page, while Processes and Technologies populate the Assets page. Every entity carries an auto-generated comment detailing its source question and answer for complete creation lineage.