iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →
Your contextContext not defined
Country of the organisation assessedNot provided
What it providesNot provided
Relationship with the EUNot provided
Home / Renewal of a European contract

Renewal of a European contract

Reach renewal with each previous commitment addressed.

Past questionnaires, annexes, open findings and expiring evidence are reconciled before the negotiation.

What your context changes

Decision to be made

To be addressed first

See the corresponding pathway →

Contract memory

Renewal starts with the responses already sent.

Questionnaires, annexes, findings and historical exceptions are reconciled with the current architecture ahead of the new negotiation.

Contractual portfolio and successive document editions, from the archive to the next review
Restore continuity between what was promised and what can still be demonstrated.

Register of deviations since signature

Three historical commitments to reassess.

IAM-07
Historical promiseMFA for all administrators
Current statusNew support centre not included
To be corrected
BCP-04
Historical promiseAnnual restoration test
Current statusLatest evidence 19 months old
To be renewed
SUB-03
Historical promisePreviously approved sub-processors
Current statusA night-shift operator added
To declare
90reading days

Demonstration timeline — the actual schedule is agreed with the client.

  1. D−90Take stock of historical commitments
  2. D-60Refresh the evidence and arbitrate discrepancies
  3. D-30Prepare negotiating positions
  4. D−0Go into review with a coherent file

Renewal position

What remains supported. What has changed. What needs to be decided.

The deliverable avoids two extremes: carrying forward answers that have become inaccurate, or reopening the entire security programme without prioritisation.

Prepare the renewal