iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Situations

Situations

Start from the situation already affecting your business

One problem, one main next step and a trail through to the evidence.

Starting point

Qualification starts with the fact that is already affecting the commercial relationship.

A questionnaire, an audit, a renewal and an incident each carry a different risk and a different timeline. The trigger determines the order of analysis, the evidence to gather and the position to prepare.

01, Trigger
The document, event or deadline that calls for a decision.
02, Exposure
The commitment or capability liable to be disputed.
03, Position
The answer the company must be able to explain and support.

Curated directory

Ten situations, ranked by the nature of the stake.

Each file sets out the points of failure, the chain of evidence and the mandate likely to address them.

01

Client requests and deadlines

Questionnaires, annexes, audits, findings, renewals and tenders.

01SituationSecurity questionnaire from a European clientBefore submission, each response must be linked to an actual control, usable evidence, a scope and any relevant exemption.02SituationAnnex or security clausesAudit rights, incidents, subcontracting, deletion, continuity and reversibility must be checked against the people and systems that will have to uphold them.03SituationAnnounced supplier auditThe scope, interviews, evidence and demonstrations are prepared based on what the client will actually verify.04SituationFindings received after an auditThe basis for the finding, its impact on the client, the correction, the owner and the evidence of closure are handled within the same record.05SituationRenewal of a European contractPast questionnaires, annexes, open findings and expiring evidence are reconciled before the negotiation.06SituationEuropean call for tendersMandatory criteria, reusable evidence and future commitments are ranked by feasibility and commercial impact.
02

Evidence and communication

When the evidence no longer supports the control or facts need to be disclosed.

07SituationSecurity evidence gapThe review distinguishes between a poorly documented existing control, evidence that is too narrow, and a genuine technical gap.09SituationCommunicating an incident to a clientTimeline, client scope, unknowns, evidence and follow-up actions are structured without substituting for the client's legal obligations.
03

Market and product security

Prepare entry into the European market or establish a product's security capability.

08SituationEntry into the European marketDirect exposure, contractual requirements, product, data and client sector are separated out before recommending any investment.10SituationProduct security gapDevelopment, dependencies, SBOM, vulnerabilities, fixes, incidents and support must form a workable, provable process.

Composite file

Several triggers may relate to the same file.

The first exchange makes it possible to distinguish immediate urgency from underlying work, then to set a coherent mandate without multiplying separate approaches.

Present the situation