Home / Jurisdictions
Jurisdictions
Local and national context
The country may change data transfers, local rules, engagement eligibility and certain performance conditions without automatically easing a supplier audit.
Exposure profile
What the context changes in this analysis.
Data transferTo be qualified according to actual flows
Bilateral relationshipNo automatic effect on audit
Country sourcesTo be verified depending on the country
Country file
Country benchmarks
Sources reviewed on —
01
Economy and sectors
What this data indicates
02
Incidents, fraud and impersonation
Risks observed
03
Points to check within your organisation
What your client may ask you to demonstrate
Developments to be aware of
The topics that may change your answers
What this means for your situationUnderstand the country's effects on your European relationship →
How to read this data. Statistics describe populations, reports or incidents using different methodologies. They provide context; they measure neither your organisation's compliance nor its likelihood of suffering an attack.
Assumptions, limitations and sources of this reading
Reading point
What the country concretely changes in a relationship with a European client
The place of performance can affect data transfers, contractual terms, remote access and the organisation of an on-site engagement.
- Transfer adequacy: full, partial, conditional or absent
- Trade or association agreement: effect distinguished from cyber requirements
- Laws and local authorities relevant to the actual scope
- Locations of delivery, subcontracting, remote access and on-site intervention
- Local sources to verify when the country is not yet documented
Country reading across four planes
Use the country to enrich the context without inferring automatic compliance from it.
Data
Adequacy, transfer mechanism and specific conditions.
Trade
Applicable agreements and the exact scope of their effects.
Local law and practice
Constraints relevant to the service, access, personnel or site.
Engagement execution
Payment, insurance, travel, partners and eligibility.
Decision path
Give the country its due weight in the analysis
The national context adds useful detail to a specific decision; it creates neither a blanket equivalence nor an exemption from the expectations of European clients.
01Precise legal subject matter
Identify the local rule, authority, activity and location concerned before inferring any constraint for the engagement or service.
02Effects not to be confused
Separate data transfers, trade, taxation, insurance, travel and cyber requirements: an agreement on one does not settle the others.
03Engagement feasibility
Verify contractual capacity, payment, insurance coverage, site access and the role of any local partner before engagement.
04Dated conclusion
Retain the official source, review date, scope and validation caveat so that country context does not age into certainty.
Country-specific effects
Data that enriches the relationship without inventing a regulatory equivalence.
Questions to address
- Local requirements that add to those of the client
- Contractual and financial feasibility in your country
- Travel constraints for any potential visit
- Local partners qualified where necessary
Elements that support the response
- Up-to-date official local sources
- Contractual capacity and insurance verified
- Documented, workable payment terms
- Local partners' roles set out in the engagement plan
Confusions to avoid
- Assuming a general reading covers your jurisdiction
- Discovering payment or insurance constraints at signature
- Improvise an ineligible trip
- Concluding there is no obligation because no country factsheet is available
Assurance file, RN-058Demonstration example
Historical promiseAnnual restoration test (2024 questionnaire)Finding
Status at renewalLast successful test: 19 months agoFinding
Available evidenceExpired test report, backups monitoredFinding
Divergence observedThe commitment is no longer supported at the time of reviewGap
ImpactWeakness offered to the other side's negotiationGap
ActionRerun the test before the procurement review and file the evidenceDecision
Reading the coloursFactual observationGap or riskDecision or action
Demonstration
Turn the country into a decision-making context, never a compliance score.
The case retains the source, period and scope of the national benchmark, then limits its use to the relationship, flow or performance it genuinely informs.
Understanding how evidence is qualified →Apply this reading
Present the country, flows and places of execution to be qualified.
The country of execution, the flows concerned and the relationship with the European client determine which local benchmarks have a real effect.
Country files
Open a country file directly
Country file
Morocco
Official sources, European relationship, sectors, signals and assurance points.
Country fileIndia
Official sources, European relationship, sectors, signals and assurance points.
Country fileUnited Kingdom
Official sources, European relationship, sectors, signals and assurance points.
Country fileUnited States
Official sources, European relationship, sectors, signals and assurance points.
Country fileCanada
Official sources, European relationship, sectors, signals and assurance points.