Skip to content

Self-assessment10 to 15 min Client area Contact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaire Contractual annex Announced audit Findings received

A decision needs to be prepared

Renewal EU call for tenders EU market entry Product security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements

01

Reply

A document and a deadline.

Questionnaire Annex Audit All responses →

02

Prepare

Verify and remediate.

EU exposure Client and technical assessment Evidence and remediation All preparations →

03

Maintain

Keep the current commitments.

Continuous assurance Client assurance office Product security cell All recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceability Assurance register Trust room Continuous verification

Frameworks and sectors

GDPR and international access Health data and HDS NIS2 and the supply chain Industrial confidentiality All frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

Confidentiality Independence Security Reversibility

Working with iKNSA

Expertise International engagements Request an engagement Contact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →

Your contextContext not defined

Country of the organisation assessedNot provided

What it providesNot provided

Relationship with the EUNot provided

Home / Trust & firm

Trust & firm

Expertise

The skills needed to move from a contractual clause to a conclusion at system level.

Firm's capacity

The value proposition rests on continuity between governance, operations, architecture and technical evidence.

Skills are not presented as an inventory. They are brought together to the depth needed to link a client expectation to the practices, systems and evidence that support it.

Assembly by mandate

The question to be resolved determines the governance, operational and technical expertise brought together for the engagement.

Depth of review

Expertise is combined according to the commitment to be verified, not according to a fixed technical catalogue.

01

Architecture, code and dependencies

02

Cloud, Kubernetes, CI/CD and secrets

03

IAM, MFA and privileged accounts

04

Operations, continuity, governance and suppliers

Putting into practice

Assemble competencies according to the desired conclusion.

Client commitment

Questionnaires, contracts, audits and evidence requirements.

Governance

Responsibilities, risks, suppliers and decisions.

Operations

Identities, continuity, incidents and operations.

Platforms

Application, cloud, Kubernetes, CI/CD and product security.

Checkpoints

01

European perspective

Review of the client's expectations and the contract.

02

Technical depth

Ability to drill down to actual systems and practices.

03

Traceability

Sources, findings, limitations and decisions linked together.

04

Remediation

Moving from a gap to an action and closing evidence.

Depth of engagement

Assemble competencies according to the desired conclusion.

The 4P method prevents a conclusion from resting solely on a policy or on a single isolated test.

Review the 4P method →

P

Promise

What is declared or contracted

P

Policy

What is organised and documented

P

Practice

What the teams actually do

P

Platform

What the systems enforce and log

Preliminary exchange

Describe the engagement or system to be examined.

The question to be settled, the system concerned and the expected depth of corroboration determine the skills to be brought together in the mandate.

Present a mandate