If I have any “No” responses in the security questionnaire, or no formal and detailed documentation, will I fail the review?

No, we will not fail you. Although the questions ask for formal and detailed documentation, we understand that depending on the size and maturity of the company, this may not be possible. We have tried to make the questionnaire generic so it can cover the entire spectrum of companies. For example, smaller companies can provide us with an informal checklist instead of a formal documentation of their security policies. If you have to answer “No” to some of the questions, please enter some comments in the comments box explaining your approach. We understand that the scoring cannot be black and white, and will factor in the different elements like company size, maturity, and so on.