Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
← Back to Field Manual

Supplier Security Questionnaire Template

Copy, adapt and use this as a starting point for your organisation.

Disclaimer: Template only. Not legal advice. Adapt before use.

Supplier details

Supplier name: [Name]
Service provided: [Service]
Data/systems involved: [Details]

Questions

  1. What data will you process or access?
  2. Where is the data stored?
  3. Do you use MFA for administrative access?
  4. How quickly will you notify us of a cyber incident?
  5. Do you subcontract any part of the service?
  6. What backup and recovery arrangements are in place?