FREE TEMPLATE · EXCEL WORKBOOK
Supplier security questionnaire
A proportionate security questionnaire for ICT suppliers, aligned with NIS2 Article 21, DORA third-party requirements, ISO/IEC 27001 and GDPR. Send it to suppliers, score the answers and track follow-up in one workbook.
What's inside
- 40 questions across governance, certification, access, vulnerabilities, incidents, continuity, subcontractors, GDPR and EU sovereignty
- Answer dropdowns and evidence fields for the supplier
- Reviewer rating per question with follow-up notes
- Supplier details and tier sheet
- Assessment summary for decision and approval
Worksheets
Supplier detailsQuestionnaireAssessment summaryFollow-up actions
How to use it
- Tier the supplier first and remove questions that are not proportionate to that tier
- Send the workbook to the supplier and ask for evidence, not only yes or no
- Rate each answer and log follow-up actions with due dates
- Record the overall decision and approval in the summary sheet
- Repeat at least annually for critical suppliers, or after a major incident or change
Related insight
Third-party risk management in 2026: from questionnaire fatigue to continuous assurance →
Same house style as every Secrato template: a start sheet with instructions, light blue cells to fill in, and version control. Free to use within your organisation. This template is practical guidance, not legal advice.
Get the template
Enter your work e-mail and we will send you a personal download link straight away. We may follow up with related guidance; you can opt out at any time.
