iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Maintain

Maintain

Support with European clients

Prepare and support discussions where controls, limits and plans must be defended.

In your situation

What the scoping will need to take into account.

Operated capacity

Prepare the exchanges where controls need to be explained.

The meeting is prepared around the likely questions, the authorised positions, the evidence that can be shared and the limits that must be explained without improvising.

Subject of the work

The meeting is prepared around authorised decisions and evidence.

Demonstration example
CLIENT BRIEFDecisions prepared
Prepare the meeting and the positions
Present the authorised evidence
Clarify the limitations
Technically negotiate remediations

How it actually unfolds

Set up a capability that remains operable over time.

Working format

Preparation of the exchange, participation in the agreed role, then debrief and attribution of the decisions reached.

Client-side mobilisation

The supplier authorises the positions and evidence that may be shared, designates its spokesperson and retains decision-making authority over its commitments.

Starting elements

Agenda, client questions, contract, previous responses, authorised evidence, known limits and expected decisions.

Building the schedule

The engagement is anchored on client meetings and includes the necessary preparation as well as the handling of resulting actions.

Operating cadence

Prepare the meeting around the authorised questions and evidence.

01Prepare the meeting and the positionsThe agenda is turned into positions to defend, sensitive questions, speaking roles and decisions expected from the meeting.
02Present the authorised evidenceOnly authorised evidence is presented, with its scope and limits clearly legible to the recipient.
03Clarify the limitationsA known limitation is explained along with its consequence and how it is handled, without being masked by a generic response.
04Technically negotiate remediationsThe remediations discussed remain compatible with internal capabilities and are assigned before being communicated.

Status maintained

The record authorised to guide the exchange.

AssetMeeting brief

The brief sets out the objective of the meeting, who speaks on what, the sensitive questions and the decisions being sought.

PlannedPresentation material

The material presents only the authorised controls and evidence, with the scope and limitations the recipient needs to understand.

To be reviewedRequest log

The log retains the questions received, the deferred answers and the person responsible for each response.

MaintainedDecisions and actions

Decisions reached during the exchange are separated from the actions to be carried out, then assigned with their deadline.

Scoping the engagement

Define the role, evidence and limits before the client meeting.

The agenda, participants, announced questions and permitted evidence make it possible to prepare the role to be played before the meeting.

Scope this engagementView the client area →