topic Re: RFP Security Assessment in Member Support

RFP Security Assessment

Devanha — Mon, 16 Dec 2019 08:53:40 GMT

Hi,

can anyone point me in the direction of a good source of vendor assessment templates? I need to create a set and I'm struggling with writers block. I'm looking for something that can get me started. This is for general security questions, not just GDPR.

Thanks in advance,

Mark Mair

Re: RFP Security Assessment

Chuxing — Mon, 16 Dec 2019 15:39:38 GMT

I would probably start with security policies, both on your side and on vendor side.

Perhaps the next thing is compliance, again on your side and on vendor side.

Re: RFP Security Assessment

emb021 — Mon, 16 Dec 2019 17:09:28 GMT

Not seen anything free.

Most of what I have seen have been questionnaires along the lines of ISO27001 controls, making sure that there are policies in place and the like.

Many questionnaires will ask for third party reports, such as SOC 1 & 2 reports (in the US), ISO27001 assessment or certification, HIPAA assessment (if healthcare), etc.