Glossary · V

Vendor security assessment

A vendor security assessment is an examination of a specific supplier’s security controls, in proportion to the consequence of its failure, using questionnaires, evidence review and where warranted independent testing.

Extended definition

In more detail.

Questionnaires screen; evidence review verifies; independent assessment proves. Consequential vendors, those whose compromise would become the organization’s breach, warrant the deeper levels. The assessment covers data handling, access, controls, incident history, continuity and contractual commitments, and produces conditions, a rating and a register entry that keeps oversight current.

By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days

Tell us what must not fail.

Discuss a Requirement →