RFP Security Assessment

[Devanha]

Hi,

can anyone point me in the direction of a good source of vendor assessment templates?  I need to create a set and I'm struggling with writers block.  I'm looking for something that can get me started.  This is for general security questions, not just GDPR.

Thanks in advance,

Mark Mair

[Chuxing]

I would probably start with security policies, both on your side and on vendor side. 

Perhaps the next thing is compliance,  again on your side and on vendor side.

[emb021]

Not seen anything free.

Most of what I have seen have been questionnaires along the lines of ISO27001 controls, making sure that there are policies in place and the like.

Many questionnaires will ask for third party reports, such as SOC 1 & 2 reports (in the US), ISO27001 assessment or certification, HIPAA assessment (if healthcare), etc.