Vendor Security Questionnaire for Small Suppliers
Ask proportionate questions of suppliers.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Create a vendor security questionnaire. What the vendor will do for us: [VENDOR_ROLE]. Data they will access: [DATA_ACCESS]. Our risk level: [RISK_LEVEL]. Write twenty questions covering access control, encryption, backups, incident response, staff screening, subprocessors, location of data, certifications (state which would be evidence, not proof), and exit. For each add why we ask and what a good answer looks like. Add a scoring approach with must-have items. Return the questionnaire and a short version of eight questions for low-risk suppliers. Contract terms need legal review [VERIFY]. Add a worked example of a short questionnaire for a low-risk supplier: eight questions such as do you use multi-factor authentication, where is our data stored, how do you handle a breach, do you use subprocessors, and can we delete our data when we leave. Provide a scoring sketch with must-have items that cannot be missed. Add a one-page decision record: supplier, data accessed, answers, risks accepted and approver.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.