Supplier risk questionnaire

To be completed by the supplier; each answer with a document reference where one exists.

Company

1. Legal entity, registration number, ownership structure
2. Financial statements available: latest year, audited yes/no
3. Sites relevant to our supply, by country

Continuity

1. Business continuity plan: exists, last tested (date)
2. Single points of failure in your supply to us (sites, sub-suppliers, materials)
3. Insurance: types and limits

Compliance

1. Certifications (ISO 9001, ISO 14001, ISO 27001, others) with certificate dates
2. Sanctions and export control screening of your own suppliers: process
3. Code of conduct for your suppliers: exists, how enforced

Information security (if data is exchanged)

1. Where is our data stored and processed
2. Access control and incident notification terms
3. Sub-processors

Sustainability

1. Emissions reporting: scope, method, last period
2. Audits by third parties: which, when, findings addressed