You can usually get out of questionnaires if you have multiple frameworks/certifications/attestations in place ... but even then some customers will insist on them