Free working template
Vendor Security Review
A proportional supplier review centred on data, access, dependency, evidence and exit planning.
Vendor Security Review
A proportional supplier review centred on data, access, dependency, evidence and exit planning.
- Organisation
- ________________________________
- Owner
- ________________________________
- Version / date
- ________________________________
Service dependency
Business process, service owner, criticality and credible failure impact.
Notes / evidence
Data and access
Data classes, hosting regions, privileged access, subprocessors and retention.
Notes / evidence
Control evidence
Independent reports, testing scope, remediation, logging and incident notice.
Notes / evidence
Resilience
Backups, recovery objectives, dependency concentration and tested continuity.
Notes / evidence
Exit plan
Export format, deletion evidence, access removal and replacement dependency.
Notes / evidence