iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityCountry filesExport mapAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextGeneral reading

Adapt the reading to the assessed company’s country and activity.

Home / Jurisdictions / Mali

Country file

Mali

The country's exports are dominated by manufactured consumer goods. Internet connectivity remains partial and hosting there is mostly provided by a foreign provider. Regional benchmarks: Sub-Saharan Africa.

Relationship with the European Union

Economic Partnership Agreement with the European Union — awaiting signature by all parties

The text has been negotiated but is not yet in effect. Check its status before contracting — and expect nothing from it in terms of security requirements.

Sources reviewed on 17 September 2026

01

Economy and sectors

Awaiting signature

Economic Partnership Agreement with the European Union

awaiting signature by all partiesThe text has been negotiated but is not yet in effect. Check its status before contracting — and expect nothing from it in terms of security requirements.

Map of trade agreements — European Commission
Third country

regime applicable to European data and access

European framework trackedNo general adequacy decision. The transfer mechanism and its accompanying measures must be chosen according to the actual data flows.

Adequacy decisions — European Commission
Designated persons

European Union restrictive measures targeting the country

EU Sanctions Map, as at 26 September 2026The EU targets designated individuals and entities here, not trade with the country. Screen the supplier, its directors and its shareholders against the consolidated list of designated persons and entities.

Council Regulation (EU) 2017/1770
02

Incidents, fraud and impersonation

21

secure servers per million inhabitants

2024, latest available figureProviders most often rely on a foreign hosting provider. Ask which one, and under which jurisdiction it operates.

Secure Internet servers — World Bank
Diverted order

verification of instruction changes

Cross-cutting controlOn recurring flows, impersonation works through a change of bank details announced partway through the relationship. Confirm it through a channel already known to you.

03

Points to check within your organisation

To be scoped

The sites and headcount involved

This type of production involves several sites and a large workforce, rarely named in the contract. Establish which ones work for you and who supervises them.

To be governed

What accompanies orders

Without an adequacy decision, order files, your teams' contact details and your own customers' data may only circulate under proper safeguards. Ask which transfer tool has been adopted and who has access to it on site.

To be traced

The host behind the provider

Providers most often rely on a foreign host. Ask which one, under what jurisdiction it operates, and what the contract between them provides for.

Developments to be aware of

The topics that may change your answers

EU restrictive measures

The EU targets designated individuals and entities here, not trade with the country. Screen the supplier, its directors and its shareholders against the consolidated list of designated persons and entities.

EU Sanctions Map — European Commission
What this means for your situation

Manufactured goods: 6.5% of goods exported. Sites, headcount and subcontracting form the first scope to establish with the European client.

Official sources

Confidential exchange

Describe your European relationship and the request received.

The Mali file establishes a country and its relationship with the Union. What remains is to establish which sites work for you, with what headcount and what subcontracting.

Contact iKNSA