iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Respond

Reply

Support for client incident communication

Coordinate the facts, evidence and follow-up commitments vis-à-vis the client.

In your situation

What the scoping will need to take into account.

Targeted engagement

Establish a common factual basis before every message.

The messages rest on a shared chronology that separates established facts, unknowns, working hypotheses and decisions already authorised.

Subject of the work

A single factual source governs every communication.

Demonstration example
ESTABLISHEDBuild the verified timeline
TO BE SCOPEDDefine the clients and services affected
TO SEPARATESeparate contractual and legal requirements
EXIT REGISTERCommunications log

How it actually unfolds

Work from the document and its deadline.

Working format

Message-preparation cell linked to crisis governance, with a shared timeline and approvals before each communication.

Client-side mobilisation

The incident manager establishes the facts; the security, legal and client relationship functions authorise the message within their respective roles.

Starting elements

Technical timeline, services and clients concerned, applicable clauses, messages already sent and questions received.

Building the schedule

The pace follows how the facts evolve and the agreed communication windows; each update explicitly supersedes the previous one.

Work carried out

Keep facts, unknowns and decisions within a single timeline.

  1. 01

    Build the verified timeline

    Events are dated from their technical and decision-making sources, with explicit correction of any information that has been superseded.

  2. 02

    Define the clients and services affected

    Affected services, impacted clients, confirmed effects and exposure still under suspicion remain kept separate in each version of the message.

  3. 03

    Separate contractual and legal requirements

    The obligations of the contract are distinguished from the qualifications and timeframes that fall under a formal legal decision.

  4. 04

    Track follow-up requests

    Every question received, response issued and action promised remains attributed until its resolution or explicit withdrawal.

Handover

The factual record of client communications.

01Factual file

The timeline brings together confirmed events, their sources and the corrections made to earlier versions.

02Client questions and answers

Responses separate established facts, ongoing investigations and information that cannot yet be disclosed.

03Communications log

Each outgoing message retains its recipient, its author, its version, its send time and the approvals obtained.

04Follow-up actions

Commitments announced to the client are assigned and tracked through to completion or formal withdrawal.

Scoping the engagement

Prepare the next message from a verified timeline.

The available timeline, notification clauses and messages already sent help frame the communicable facts and the next deadlines.

Scope this engagementContact iKNSA →