 ________  ___      ___      ___  _______                       _____      ________      
|\  _____\|\  \    |\  \    /  /||\  ___ \                     / __  \    |\   __  \    
\ \  \__/ \ \  \   \ \  \  /  / /\ \   __/|     ____________  |\/_|\  \   \ \  \|\  \   
 \ \   __\ \ \  \   \ \  \/  / /  \ \  \_|/__  |\____________\\|/ \ \  \   \ \  \\\  \  
  \ \  \_|  \ \  \   \ \    / /    \ \  \_|\ \ \|____________|     \ \  \   \ \  \\\  \ 
   \ \__\    \ \__\   \ \__/ /      \ \_______\                     \ \__\   \ \_______\
    \|__|     \|__|    \|__|/        \|_______|                      \|__|    \|_______|

Vendor Risk Assessment

Complete this assessment to evaluate your security posture

Back to Home

Basic Information

Company Name

🔑 Identity & Access Management

Q1. Is Multi-Factor Authentication (MFA) enforced for all users?

Q2. Are user accounts reviewed regularly?

🖥️ Endpoint & Network Security

Q3. Do you utilize an Endpoint Detection and Response (EDR) solution?

Q4. Are devices encrypted at rest?

🧠 Use of AI and Data Handling

Q5. Is company data used to train AI models or LLMs?

Q6. Are users allowed to paste sensitive data into AI tools?

🛡️ Logging, Detection & Monitoring

Q7. Is there a Security Information & Event Management (SIEM) system in use?

Q8. Are privileged account actions logged and reviewed?

📦 Business Continuity & Incident Response

Q9. Is there a formal Business Continuity and Disaster Recovery (BCDR) plan?

Q10. Do you have an Incident Response (IR) plan?

📜 Policies & Governance

Q11. Do you maintain formal security policies?

Q12. Are personnel trained on security awareness?

Q13. Are third-party vendors assessed for security?

Vendor Risk Assessment

Recommendations