Know what you are trusting a supplier with, before something goes wrong.

A supplier with access to your systems, data or premises can cause an incident as surely as your own staff. Most organisations only find that out after the fact.

This questionnaire covers governance, data handling, access control, incident notification, continuity, subcontractors, audit rights and offboarding, ten sections, scored Yes, Partial or No, with the evidence to ask for behind each answer.

Send it before a new supplier gets access, and again every year for the ones who already have it.