Supplier Information

Company Name

Contact Person

Contact Email

Contact Phone

General Compliance

Are you compliant with relevant data protection laws (e.g., GDPR)? Yes No

Do you have an Information Security Management System (ISMS) in place? Yes No

Please list any relevant security/compliance certifications (e.g., ISO27001, SOC 2):

Do you encrypt data at rest and in transit? Yes No

Are regular data backups performed? Yes No

Describe your incident management process:

Do you have role-based access controls (RBAC) implemented? Yes No

Is multi-factor authentication (MFA) required for access? Yes No

Do you use any subcontractors or third-party vendors? Yes No

If yes, briefly describe your third-party risk management process:

Please provide any other relevant information or comments: