Services

Make supplier security reviews more consistent and useful.

Understand the security risks associated with suppliers and turn due diligence into proportionate decisions and follow-up actions.

Discuss supplier assurance.

What we help you do.

  • Categorise suppliers by risk and criticality.
  • Define review criteria and evidence requests.
  • Evaluate available assurance material.
  • Record findings and follow-up actions.
  • Establish a repeatable review process.

Typical outputs.

Supplier review criteria, assessment templates, findings summaries and an action register.

Typical outputs describe potential engagement deliverables. Actual deliverables depend on the scope agreed for each engagement.

What to discuss when scoping the work

  • Which suppliers support important services or handle sensitive data?
  • What decisions will the assessment support: onboarding, renewal or remediation?
  • Which contracts, questionnaires and assurance reports are available?

Illustrative engagement

Before renewing a cloud service, a buyer needs to understand the supplier’s access, recovery arrangements and unresolved findings. A review can identify evidence gaps and the questions to resolve before making the purchasing decision.

How the engagement can proceed

  1. Set review criteria according to the supplier’s role and risk.
  2. Assess available evidence and record questions requiring clarification.
  3. Document findings, decision points and follow-up responsibilities.