This presentation will cover information security assurance at its best and at its worst. Three key topics that will be covered are: 1) Supply Chain Risks and Case Studies 2) Security clauses in supplier agreements 3) The Security Questionnaire Vortex (the good, the ugly and the absurd).