This question applies to users of ERMS who are using MoReq2 to procure an ERMS.

If you are using MoReq2 after compliance testing has started, when several compliant solutions are available, you should avoid procurement processes that require potential suppliers to confirm their compliance with all the MoReq2 requirements individually. Asking for responses to hundreds of requirements will use up a lot of effort, in both your organisation and in the suppliers’ organisations. You should instead ask potential suppliers for proof of compliance (the test certificate) and then ask them to respond to specific questions that apply to your situation.