iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Maintain

Maintain

EU client assurance office

Sustainably manage questionnaires, annexes, audits, evidence and interactions for several European clients. This function corresponds to the EU Customer Assurance Office.

In your situation

What the scoping will need to take into account.

Operated capacity

Organise a shared capability for multiple European clients.

A shared entry point absorbs requests from several clients while preserving each one's contracts, sharing restrictions and specific decisions.

Subject of the work

Requests from several clients fall within the same operated capability.

Demonstration example
Centralise incoming requestsOperated entry pointPlanned
Coordinate owners and approvalsMulti-client registerTo be executed
Maintain commitments and deadlinesPortfolio reportTo be reviewed
Prepare client communicationCapacity plansMaintained

How it actually unfolds

Set up a capability that remains operable over time.

Working format

Common entry point for European requests, triage, coordination of approvals and portfolio management.

Client-side mobilisation

A portfolio sponsor names the internal leads and arbitrates priorities when several clients request the same capabilities.

Starting elements

Inventory of clients, contracts, open requests, historical responses, reusable evidence, restrictions and deadlines.

Building the schedule

The capability operates on agreed processing and governance cycles, adjusted to the portfolio's volume and deadlines.

Operating cadence

Absorb recurring requests without recreating each file from scratch.

01Centralise incoming requestsEvery incoming request is assigned a client, a deadline, a criticality and an owner before being distributed to the teams.
02Coordinate owners and approvalsApprovals follow internal authorities so that a shared response does not create a commitment without an owner.
03Maintain commitments and deadlinesContracts, evidence and historical responses are reviewed on expiry or when a change affects their validity.
04Prepare client communicationOutbound communication stays consistent across clients while respecting each one's specific clauses and restrictions.

Status maintained

The shared memory of European relationships.

AssetOperated entry point

The intake point qualifies each request by client, deadline, criticality and owner before routing it.

PlannedMulti-client register

The register brings shared commitments together without erasing the clauses, restrictions and decisions specific to each client.

To be reviewedPortfolio report

The report shows upcoming deadlines, fragile evidence, open requests and the capabilities where risk is concentrated.

MaintainedCapacity plans

Recurring needs become quantified capacity decisions, assigned and linked to the relationships they must support.

Scoping the engagement

Organise a shared point of entry without conflating client mandates.

The volume of requests, the number of clients and the internal responsibilities make it possible to define the intake point and the service levels required.

Scope this engagementView the client area →