iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Respond

Reply

Response to audit findings

Qualify the basis, impact and closure path of each finding.

In your situation

What the scoping will need to take into account.

Targeted engagement

Give every finding a credible path to resolution.

Each observation received must be examined before choosing between acceptance, qualification or challenge, then linked to a correction and its evidence of closure.

Subject of the work

Each finding joins an explicit decision path.

Demonstration example
To be investigatedDistinguish substantiated, partial and disputable findingsResponse matrix
AssignedDefine the fix, dependencies and ownerRemediation plan assigned
In progressScope the response to the clientEvidence schedule
Expected evidenceVerify closure evidencePosition on residual risk

How it actually unfolds

Work from the document and its deadline.

Working format

Adversarial review of each finding, assignment of corrective actions and review of the response before communication.

Client-side mobilisation

Control owners confirm the facts, accept or dispute the finding, and commit to a realistic action.

Starting elements

Audit report, elements presented to the auditor, related correspondence, supplementary evidence and requested response deadlines.

Building the schedule

The pace is governed by response and closure deadlines; a finding moves to the next stage only once a position has been assigned.

Work carried out

Establish the basis, the action and the closure evidence.

  1. 01

    Distinguish substantiated, partial and disputable findings

    The basis, the sample and the scope are re-examined before accepting, qualifying or disputing the finding.

  2. 02

    Define the fix, dependencies and owner

    The correction retains an owner, its prerequisites, a realistic deadline and a verifiable outcome.

  3. 03

    Scope the response to the client

    The response explains the company's position without promising a date or capability that has not been authorised.

  4. 04

    Verify closure evidence

    Closure rests on evidence examined within the scope of the finding, not on a progress statement.

Handover

The records needed to answer and then close.

01Response matrix

The matrix restates the basis, the sample and the scope of each finding before setting out the company's position.

02Remediation plan assigned

Each correction is linked to its cause, its dependencies, its owner and the verifiable outcome expected.

03Evidence schedule

The milestones indicate when the correction can be observed, what evidence will be produced and who will be able to confirm its scope.

04Position on residual risk

The report separates the risk that has been removed from the risk that remains, and identifies the authority accepting or rejecting that residual risk.

Scoping the engagement

Organise the response around the findings actually received.

The report received and its response date make it possible to immediately distinguish findings still to be investigated, corrections already under way and evidence still awaited.

Scope this engagementContact iKNSA →