Identify potential security vulnerabilities in your vendors with this third-party risk assessment questionnaire. Created by security experts, it contains 80 essential questions for unearthing security threats that could lead to data breaches or cyberattacks.
Use this vendor risk assessment questionnaire to bring a uniform approach to your risk assessments and strengthen your ability to identify risks.
What this template contains
This vendor risk assessment questionnaire is made up of four core sections, allowing you to focus your assessment on the areas most relevant to you and your vendors.
- Information security and privacy. Assess how vendors handle your sensitive data, including personal identifiable information (PII) and protected health information (PHI).
- Physical and data center security. Evaluate the physical security of office locations and data centers, including business continuity plans.
- Web application security. Review security features in web applications such as SSL certificates, password management, and vulnerability scanning.
- Infrastructure security. Assess network security, data backups, and protection against malware and ransomware.
