Remote Contractor Security Assessment Form

Contractor Information

Contractor Name Company Email Phone Number

Engagement Details

Project/Engagement Name Description of Services Provided

Security Practices

How is remote access managed? What types of devices are used for work? Describe endpoint security controls (e.g. antivirus, encryption) Is VPN used for remote connections? Yes No Where is confidential/client data stored?

Access Controls

How is access to company systems granted? Is multi-factor authentication (MFA) enforced? Yes No Are separate user accounts used for each contractor? Yes No

Incident Response

Describe the process for reporting security incidents

Additional Comments