How much time does this system actually save with questionnaires

Where the time savings come from

The savings are not in filling out itself, but in no longer having to look things up. With every questionnaire, most of the time goes into research: who signs, which certificate did we have again, where is the BCP document. You do that research now once, with the first list. After that, the system recognizes the same question again — or a variant of it, such as with the ten measures of Article 21(2) NIS2 versus an ISO 27001 Annex A question on the same subject — and prepares the answer from the chain file immediately. You confirm with yes or no, instead of rewriting.

How much that concretely saves varies per list and per client, and we prefer not to report that with a percentage we cannot support. What is structurally the case: questions about the number of employees, annual turnover or the locations appear in virtually every list, whether it is a bank, insurance or sustainability format. These are precisely the fields that after the first time no longer require research.

Why lists overlap each other

That overlap is no coincidence follows from the sources themselves. The VSME basic module of EFRAG and the reporting obligations under Directive (EU) 2022/2464 (CSRD) ask largely the same business data as a bank or insurance questionnaire: identity, size, locations. Article 21(2) of Directive (EU) 2022/2555 (NIS2) mentions ten measures that appear in virtually every cybersecurity list, often alongside or instead of a reference to ISO/IEC 27001 Annex A. And basic data such as the statutory name and registration number are already established under the Trade Register Act 2007 — you never need to reconstruct these. Because the underlying question always touches the same source data, the file is one-time, and every subsequent list is mainly confirmation.