Procurement Security Assessment Questionnaire Form
Evaluate your organization's procurement security practices with this structured assessment.
How would you rate your organization's overall procurement security maturity?
*
1
2
3
4
5
Which of the following best describes your supplier vetting process?
*
Comprehensive and standardized across all suppliers
Defined but not consistently applied
Ad hoc or informal
No formal process
How frequently are supplier security risks assessed and reviewed?
*
At least annually
Every 2-3 years
Only during onboarding
Not formally assessed
To what extent are security requirements included in supplier contracts?
*
Not included
1
2
3
4
Fully integrated
5
1 is Not included, 5 is Fully integrated
Please indicate your level of agreement with the following statements about procurement security.
*
Rows
Strongly Disagree
Disagree
Neutral
Agree
Strongly Agree
We conduct security due diligence before engaging new suppliers
1
2
3
4
5
We monitor supplier compliance with our security requirements
6
7
8
9
10
We have a process for managing supplier security incidents
11
12
13
14
15
How are procurement-related security incidents tracked and managed?
*
Through a dedicated incident management system
Manually (e.g., spreadsheets or emails)
Not formally tracked
How confident are you that supplier data handling practices meet your organization’s security standards?
*
Not confident
1
2
3
4
Very confident
5
1 is Not confident, 5 is Very confident
Which of the following best describes your approach to third-party risk management in procurement?
*
Formal risk assessment and continuous monitoring
Risk assessment at onboarding only
Minimal or no risk assessment
Are procurement staff provided with regular security training?
*
Yes, annually or more often
Occasionally
No
Please provide any additional comments or context regarding your procurement security practices.
Submit Assessment
Should be Empty: