Vendor Security Screening Questionnaire
Vendor Information
Company Name
Contact Name
Contact Email
Contact Phone
General Security Policies
Does your organization have formal security policies?
Yes
No
When was your security policy last reviewed/updated?
Data Protection
Do you encrypt sensitive data at rest?
Yes
No
Do you encrypt sensitive data in transit?
Yes
No
List relevant standards or certifications (e.g., ISO 27001, SOC 2):
Access Control
Do you use multi-factor authentication for system access?
Yes
No
Describe how user access is granted and reviewed:
Incident Response
Do you have a documented Incident Response Plan?
Yes
No
How are incidents reported and handled?
Additional Information
Comments / Additional Notes: