Skip to content
SourceTier

Template

Supplier risk questionnaire

To be completed by the supplier; each answer with a document reference where one exists.

Company

  1. Legal entity, registration number, ownership structure
  2. Financial statements available: latest year, audited yes/no
  3. Sites relevant to our supply, by country

Continuity

  1. Business continuity plan: exists, last tested (date)
  2. Single points of failure in your supply to us (sites, sub-suppliers, materials)
  3. Insurance: types and limits

Compliance

  1. Certifications (ISO 9001, ISO 14001, ISO 27001, others) with certificate dates
  2. Sanctions and export control screening of your own suppliers: process
  3. Code of conduct for your suppliers: exists, how enforced

Information security (if data is exchanged)

  1. Where is our data stored and processed
  2. Access control and incident notification terms
  3. Sub-processors

Sustainability

  1. Emissions reporting: scope, method, last period
  2. Audits by third parties: which, when, findings addressed
Copy the source (Markdown, select and copy)
# Supplier risk questionnaire

To be completed by the supplier; each answer with a document reference where one exists.

## Company

1. Legal entity, registration number, ownership structure
2. Financial statements available: latest year, audited yes/no
3. Sites relevant to our supply, by country

## Continuity

4. Business continuity plan: exists, last tested (date)
5. Single points of failure in your supply to us (sites, sub-suppliers, materials)
6. Insurance: types and limits

## Compliance

7. Certifications (ISO 9001, ISO 14001, ISO 27001, others) with certificate dates
8. Sanctions and export control screening of your own suppliers: process
9. Code of conduct for your suppliers: exists, how enforced

## Information security (if data is exchanged)

10. Where is our data stored and processed
11. Access control and incident notification terms
12. Sub-processors

## Sustainability

13. Emissions reporting: scope, method, last period
14. Audits by third parties: which, when, findings addressed