Third-party & supply-chain risk

Your dependencies deserve a closer look.

Specialist delivery and availability are confirmed during scoping.

THE RIGHT STARTING POINT

For procurement, risk, and technology teams onboarding suppliers or reviewing critical outsourced services.

A clear scope. A useful outcome.

A supplier questionnaire is a starting point. Organize your critical dependencies, examine relevant evidence, and record the decisions and follow-up actions needed before and after onboarding.

The final scope, deliverables, and timing are agreed for your engagement.

What we cover

• Supplier inventory and risk tiering
• Security evidence and access review
• Contractual security requirements with your advisers
• Reassessment triggers and exit planning

What you take away

• Tiered supplier register
• Assessment and evidence summary
• Risk decisions and remediation tracker
• Ongoing review and escalation workflow

How to engage

Programme setup, a focused supplier assessment, or a recurring review cycle.

What progress looks like

Critical suppliers reviewed, overdue actions closed, and dependencies with an agreed continuity plan.

Before the engagement.

Agree the systems and business processes in scope, the authorisation required, the people involved and how the findings will be used. Timelines, deliverables, exclusions and any verification work should be confirmed directly.