Guidance by trigger
A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.
Review situationsThe supplier examines its own capability. The European client defines the supplier decision it needs to reach.
Self-assess my organisation →Assess a supplier →Search the platform →Choose an engagement
Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.
View all engagementsVerify and remediate.
EU exposureClient and technical assessmentEvidence and remediationAll preparations →Keep the current commitments.
Continuous assuranceClient assurance officeProduct security cellAll recurring services →Basis for the conclusions
The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.
Review the 4P methodSee fictitious examples to understand the structure and depth of the deliverables.
See examples of deliverables →Terms of engagement
Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.
Review the firm's rulesHave an international supplier assessed under explicit mandate and sharing rules.
Assess a supplier →European principals
For procurement, third-party risk, security or legal teams who need to understand what a supplier can genuinely support — and obtain a usable decision pathway.
Before work begins, iKNSA clarifies who is instructing, who is paying, who receives the conclusions and what can be shared.
The requesting party defines the scope and the decisions expected. The supplier knows the rules for interviews, evidence and reporting.
The supplier remains iKNSA's client. No information is disclosed to the requesting party without explicit written authorisation.
Sharing rules, milestones and closure criteria are agreed. Remediation is never presented as an independent certification.
What you get
Requirement → statement → policy → practice → platform → evidence → finding → impact → remediation.
The authorised information and recipients are agreed before collection.
Any prior or concurrent role that could affect independence is made explicit.
The level of verification, the scope and the limitations accompany every finding.
