GRCLibrary.ai

Template

Supplier Security Questionnaire

This questionnaire is issued to suppliers and third-party service providers to gather information about their information security and privacy controls. Responses are used to assess whether the supplier meets the organization's requirements under supply-chain/standard-supplier-security-and-privacy-assurance.md.

Type
Template
Version
1.0.8
Date
2026-09-25
Owner
Supplier Risk Maintainer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Supply Chain Governance: Assessment
Review frequency
Annual and upon significant standards revision
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Section 1: organization profile
  • Section 2: security governance
  • Section 3: access control and identity management
  • Section 4: vulnerability and patch management
  • Section 5: network and infrastructure security
  • Section 6: incident response
  • Section 7: data protection and privacy
  • Section 8: business continuity and resilience
  • Section 9: sub-contractors and fourth parties
  • Section 10: trade compliance (for logistics suppliers)
  • Section 11: AI systems
  • Section 12: certifications and evidence attached
  • Declaration

Related documents