How to reduce vendor security review backlogs

A vendor has submitted its SOC 2 report and security questionnaire, but the review is still open. The business owner is asking when they can buy. Security is waiting for a missing attachment, and nobody is sure whether legal has finished reviewing the contract.