iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Method and evidence

Method and evidence

Assurance method, traceability and evidence

The same objects link the diagnostic, the engagements, the assurance register and the trust room.

Evidence architecture

A credible conclusion must be capable of being reconstructed.

The reader must be able to trace back to the original requirement, the facts examined, the level of verification, the limitations and the resulting decision. This continuity links engagement deliverables, the assurance register and the controlled views in the trust room.

01, Reasoning
The explicit relationship between requirement, commitment and control.
02, Evidence
Its source, scope, date and level of verification.
03, Limit
What remains declarative, incomplete, restricted or out of scope.

Curated directory

From the review method to the assurance objects.

The foundations, the continuity tools and the examples are presented separately so their respective roles are immediately clear.

01

Foundations of the review

4P method, traceability, reliability of sources and on-site observation.

01Method & evidence4P Assurance MethodCross-check Promise, Policy, Practice and Platform before concluding that a response is substantiated.02Method & evidenceEvidence traceabilityEvidence only has value if its source, scope, date, restriction and level of verification are known.03Method & evidenceRegulatory reliabilityEach piece of content distinguishes source, jurisdiction, status, application, review date and limitations.04Method & evidenceOn-site assurance methodA visit addresses a precise hypothesis and produces observations linked to commitments.
02

Continuous assurance objects

assurance register, trust room and monitoring of drifts that affect commitments.

05Method & evidenceEuropean assurance registerThe European assurance register organises knowledge by the commitment made to each European client, not solely by framework.06Method & evidenceTrust roomThe trust room shares a controlled view of the assurance register without creating a second database or a pseudo-label.07Method & evidenceContinuous technical verificationLink a technical drift to the control, the evidence and the client commitments it affects.
03

Examples of reporting

Matrices and finding trails enabling a concrete examination of the quality of the reasoning.

08Method & evidenceDeliverable examplesShow the depth of the analysis without using real client data.09Method & evidenceSample questionnaire matrixFrom the client's wording to the response position and the evidence expected.10Method & evidenceExample of a finding trailFrom the finding to the commercial impact, the action, the closure evidence and the residual risk.

Continuity of the trail

The method does not stop at the deliverable.

Decisions, evidence, exceptions and deadlines retain their context so they can be picked up again during an audit, a renewal or a new request.

Review deliverables