Control your vendors

What it’s for

The Act keeps you responsible for processing a Data Processor does on your behalf, and lets you use one for your goods or services only under a valid contract. Screen each vendor first; the contract in step 09b closes the gaps the screening finds.

What you fill in

1. 1

   Vendor workbook

   Four tabs: Instructions, Vendor Register, Vendor Questionnaire and Dashboard.

2. 2

   Vendor Questionnaire

   Thirty-eight questions, each tied to its source, with a critical-fail override. The score, risk level and next review date are calculated for you.

3. 3

   Vendor Register

   Each vendor, the data you share and its tier, with an approval status you set.

4. 4

   Dashboard tab

   Vendors by risk level, assessment state and approval status.

From the video

Two frames from the walkthrough. The worked example is a fictional online store.

Basis Act s.8(1); Act s.8(2). How we arrived here