[Blog](/blog) Show links Resources [Blog](/blog) [Breaches](/breaches) [eBooks, reports, & more](/resources) [Events](/events) [News](/news) [Third-Party Risk Management](/category/third-party-risk-management) Show links Categories [Attack Surface Management](/category/attack-surface-management) [Company News](/category/company-news) [Compliance and Regulations](/category/compliance-and-regulations) [Cybersecurity](/category/cybersecurity) [Data Breaches](/category/data-breaches) [DevOps](/category/devops) [Human Cyber Risk](/category/human-cyber-risk) [Risks and Vulnerabilities](/category/risks-and-vulnerabilities) [Third-Party Risk Management](/category/third-party-risk-management) [Vendor Risk Management](/category/vendor-risk-management) [Vendor Pandemic Questionnaire for Cybersecurity (Free Template)](/blog/free-template-vendor-pandemic-questionnaire) Publish date December 9, 2025 {x} minute read # Vendor Pandemic Questionnaire for Cybersecurity (Free Template) [Get a demo](/contact-sales) [Free trial](/demo) [Download the PDF guide](/resources/free-vendor-risk-assessment-questionnaire-template) [Free trial](/demo) Written by [Edward Kost](/team/edward-kost) Senior Cybersecurity Writer Edward is a cyber writer with a mechanical engineering background. His work has been referenced by academic institutions and government bodies. Reviewed by [Kaushik Sen](/team/kaushik-sen) Chief Marketing Officer Kaushik has a background in software engineering, enterprise solution architecture, and data analytics. He brings a unique, data-driven perspective to cybersecurity education. Table of contents Checklist Free Vendor Risk Assessment Questionnaire Template Free resource ### Free Vendor Risk Assessment Questionnaire Template [Download now](/resources/free-vendor-risk-assessment-questionnaire-template) Use this free questionnaire template to inspire the design of your own questionnaire evaluating a vendor’s level of cyber threat resilience in the face of a global pandemic similar in scope to the COVID-19 pandemic. Remove the stress from vendor security risk tracking with UpGuard's [third-party questionnaire software.](https://www.upguard.com/product/vendor-risk/questionnaire-management) > **Note:** UpGuard offers a customizable pandemic questionnaire template that automatically detects cyber risks based on questionnaire responses. For the most dependable and scalable Vendor Risk Management program, it’s highly recommended to manage your vendor security questionnaires through a VRM platform like UpGuard. ## Template for Evaluating Vendor Supply Chain Risk in a Pandemic Context *Each dot point item indicates the design of each input option. Yes, No and Not Sure should be checkboxes, followed by a free text field for when further clarification is available.* ### Question 1: Do you have a business continuity plan in place? * Yes * No * Not Sure * Free Text Field ### Question 2: Have all of the critical functions of your business been identified? * Yes * No * Not Sure * Free Text Field ### Question 3: Have all key personnel responsible for ensuring business continuity been identified? * Yes * No * Not Sure * Free Text Field ### Question 4: Do all key personnel have clearly defined roles for ensuring continuity in the event of a business disruption? * Yes * No * Not Sure * Free Text Field ### Question 5: Do you have any crisis management teams in place? * Yes * No * Not Sure * Free Text Field ### Question 5a: If you answered Yes, are they aware of their responsibilities? * Yes * No * Not Sure * Free Text Field ### Question 6: How often are crisis scenarios simulated? * Not Sure * Free Text Field ### Question 7: Was your business impacted by the COVID-19 Pandemic? * Yes * No * Not Sure * Free Text Field ### Question 7a: If you answered Yes, explain the degree of impact. * Not Sure * Free Text Field ### Question 7b: If you answered Yes, explain how your continuity plans have been adjusted to better cope with future similar events. * Not Sure * Free Text Field ### Question 8: Do you have a pandemic plan? * Yes * No * Not Sure * Free Text Field ### Question 8a: If you answered Yes, has this plan ever been tested? * Yes * No * Not Sure * Free Text Field ### Question 8a(i): If you answered Yes, what was the maximum downtime you experienced during these tests? * Not Sure * Free Text Field ### Question 8a(ii): If you answered Yes, what was the maximum degree of sensitive data impact experienced during these tests? * Not Sure * Free Text Field ### Question 9: Are you aware of which of your products and services would be impacted by a potential pandemic? * Yes * No * Not Sure * Free Text Field ### Question 9(i): Would any of these disruptions impact your SLAs? * Yes * No * Not Sure * Free Text Field ### Question 10: Are you aware of which of your vendors would be most impacted by a pandemic? * Yes * No * Not Sure * Free Text Field ### Question 11: Are you aware of which of your vendors are most likely to suffer a security incident during a pandemic? * Yes * No * Not Sure * Free Text Field ### Question 12: Do you have a real-time monitoring solution for tracking  cyber risks in your supply chain? * Yes * No * Not Sure * Free Text Field ### Question 13: Do you have response plans in place for when vendors in your supply chain suffer a data breach? * Yes * No * Not Sure * Free Text Field ### Question 13a: If you answered Yes, has this response plan been tested in a simulated incident? * Yes * No * Not Sure * Free Text Field ### Question 14: Were any of your current or previous service providers impacted by the Coronavirus pandemic? * Yes * No * Not Sure * Free Text Field ### Question 15: Are you aware of which regulations might be violated if a vendor suffers a data breach? For example, GDPR, PCI DSS, HIPAA, etc. * Yes * No * Not Sure * Free Text Field ### Question 16: Do you have a Third-Party Risk Management program in place? * Yes * No * Not Sure * Free Text Field ### Question 16a: If you answered Yes, is this program supported by a tool streamlining the entire TPRM workflow? With features supporting secure onboarding, vendor risk assessment, regulation compliance (especially for heavily regulated industries like healthcare), dashboards tracking supply chain security postures, etc. * Yes * No * Not Sure * Free Text Field ### Question 17: Do you manage any aspect of your security questionnaire process in Excel spreadsheets? * Yes * No * Not Sure * Free Text Field ### Question 18: Have you worked with stakeholders to develop a plan for responding to business disruptions during a pandemic? * Yes * No * Not Sure * Free Text Field ### Question 19: Have your employees been trained to properly respond to a pandemic? * Yes * No * Not Sure * Free Text Field ### Question 20: Are your employees aware of the increased risk of social engineering and phishing attacks during a pandemic? Across multiple mediums, including SMS, social media, and social apps. ### Question 20a: If you answered Yes, have your employees been equipped to mitigate these risks through threat awareness training? WIth either in-person or digital training events (such as webinars and training videos). * Yes * No * Not Sure * Free Text Field ### Question 20a(i): If you answered Yes, have these training events been accompanied with simulated phishing attacks to test their impact? * Yes * No * Not Sure * Free Text Field ### Question 21: Can your organization operate in a remote workforce model? * Yes * No * Not Sure * Free Text Field ### Question 21a: If you answered Yes, have all software and app integrations facilitating remote network connections been pen-tested? * Yes * No * Not Sure * Free Text Field ### Question 22: Do you use any survey software or survey templates for tracking the security risk of vendors in your supply chain? * Yes * No * Not Sure * Free Text Field ### Question 23: Do you have a Privileged Access Management system in place for limiting sensitive resource access in a remote workforce context? * Yes * No * Not Sure * Free Text Field ### Question 24: Have you implemented a network segregation strategy for obfuscating sensitive resource access? To contend with cyber threats likely to increase in ferocity during a pandemic, such as ransomware attacks. * Yes * No * Not Sure * Free Text Field ### Question 25: Do you have any additional comments in relation to your level of pandemic preparedness? * Free Text Field Checklist Free Vendor Risk Assessment Questionnaire Template Free resource ### Free Vendor Risk Assessment Questionnaire Template [Download now](/resources/free-vendor-risk-assessment-questionnaire-template) ## Related posts Learn more about the latest issues in cybersecurity. Third-Party Risk Management #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) October 18, 2026 Third-Party Risk Management #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 Third-Party Risk Management #### [The Vendor Assurance Confidence Gap: Why It’s Widest With Your Most Critical Vendors](/blog/vendor-assurance-confidence-gap) Vendor assurance efforts are rising while confidence in them is falling. This gap is widest with the vendors that matter most. Here’s why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) August 25, 2026 Third-Party Risk Management #### [Higher Education TPRM in 2026: New Research Maps the Vendor Visibility Gap](/blog/higher-education-tprm-2026) Explore UpGuard’s latest research into higher education third-party risk, including supplier concentration and systemic vendor exposure. [](/team/cassy-van-eeden) [Cassy van Eeden](#) August 10, 2026 Third-Party Risk Management #### [Ongoing TPRM Success: Continuous Security Monitoring with AI](/blog/continuous-security-monitoring-with-ai) Is manual work weighing down your security team and limiting your ability to scale? Learn how UpGuard and its AI features can help. [](/team/nicholas-sollitto) [Nicholas Sollitto](#) September 29, 2026 Third-Party Risk Management #### [Report Writing Solved: Generating Actionable Assessment Reports](/blog/report-writing-solved) Is manual report writing slowing down your security team? Learn how UpGuard’s AI can help. [](/team/nicholas-sollitto) [Nicholas Sollitto](#) April 2, 2025 [All posts](/blog) Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)