Cybersecurity Due Diligence Questionnaire


Summary

This template provides a list of questions to consider when developing a cybersecurity plan, and includes governance, general cybersecurity risk management, and past experience considerations. This template contains practical guidance and drafting notes. This questionnaire can be sent to suppliers and other third parties with whom you do business to establish the nature and extent of their information security and cybersecurity arrangements. It may also be called an information security supplier audit or cybersecurity supplier audit. It is not intended to be a comprehensive document for the telecommunications, financial services, or other essential services sectors, but rather it is aimed at compliance professionals in general commercial organisations. Drafting Note to Questionnaire: Brexit: IP Completion Day: 11pm (GMT) on 31 December 2020 marked the end of the Brexit transition/implementation period entered into following the UK's withdrawal from the EU. At that point in time ...