My company annually completes 30+ questionnaires from financial services companies,  healthcare organizations and to various other sector clients. Questions to most extent are repetitive. I was wondering if there is a service that Shared Assessments provides to vendors who fill out questionnaires.

The Shared Assessments Standard Information Gathering (SIG) questionnaire was designed to address your situation. The SIG is used by companies wishing to conduct risk management vendor due diligence.   It was also designed to provide service providers with an easy to use questionnaire that can be completed and provided to their clients.  The SIG is currently used by service providers across the globe to respond to customer questionnaires.  In this way, rather than completing a substantial number of different proprietary questionnaires from client's, a service provider can complete the SIG once and provide it to multiple clients.  Many service providers also use the SIG to respond to requests for proposals (RFP's) to help identify the breadth of their IT and data security practices.

Once upon a time, privacy and information security were an afterthought during contract negotiations. But breach notification has fundamentally changed the process, causing organizations to become increasingly concerned with their service providers' privacy and security practices. Breach reporting time periods and breach indemnification costs can be the most hotly contested provisions in a contract negotiation. 

...Read more

• Church Pension Group
• Globe Tax
• Wayne County MI