iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityCountry filesExport mapAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextGeneral reading

Adapt the reading to the assessed company’s country and activity.

Home / Jurisdictions / India

Country file

India

India combines an evolving European commercial relationship, a large-scale IT/ITeS industry and a national incident-monitoring framework.

Relationship with the European Union

EU–India free trade agreement concluded, not yet binding

Negotiations were concluded on 27 January 2026, but the text only becomes binding after signature and internal procedures. It does not remove the need for supplier assurance.

Sources reviewed on 1 November 2026

01

Economy and sectors

No country regime

European Union restrictive measures targeting the country

EU Sanctions Map, as at 26 September 2026No EU restrictive measures regime targets this country. Thematic regimes — terrorism, human rights, cyberattacks, chemical weapons — nonetheless target individuals of any nationality: screening against the consolidated list applies here as elsewhere.

EU Sanctions Map — European Commission
02

Incidents, fraud and impersonation

03

Points to check within your organisation

To segment

Delivery sites and teams

Establish which teams, entities, locations and populations actually access the European client’s scope.

To corroborate

Access and privileged accounts

Demonstrate the account lifecycle, MFA, reviews, exceptions and traceability beyond the central policies.

To be organised

Fraud and sensitive instructions

Document trusted channels, out-of-band validation and dual approval for changes of beneficiary or sharing arrangements.

Developments to be aware of

The topics that may change your answers

EU restrictive measures

No EU restrictive measures regime targets this country. Thematic regimes — terrorism, human rights, cyberattacks, chemical weapons — nonetheless target individuals of any nationality: screening against the consolidated list applies here as elsewhere.

EU Sanctions Map — European Commission
What this means for your situation

The scale of the Indian sector reinforces the need to move down from the group-wide framework to the service actually delivered: entity, site, people, access, subcontractors and evidence. National statistics do not constitute a supplier risk score.

Official sources

Confidential exchange

Describe your European relationship and the request received.

The India file positions a country and its relationship with the Union. What remains is to examine what your client expects of you, what your contract provides for, and what your evidence can establish today.

Contact iKNSA