iKNSA International
Self-assessment10 to 15 minClient areaContact iKNSA

Guidance by trigger

The triggering event determines the order of the analysis.

A questionnaire, an audit, market entry or the maintenance of several engagements each call for distinct decisions and levels of evidence.

Review situations

A client request exists

Security questionnaireContractual annexAnnounced auditFindings received

A decision needs to be prepared

RenewalEU call for tendersEU market entryProduct security

The role determines the mandate

The supplier examines its own capability. The European client defines the supplier decision it needs to reach.

Self-assess my organisation →Assess a supplier →Search the platform →

Choose an engagement

Meet the deadline. Establish capacity. Sustain commitments.

Start from what needs to be obtained now: an answer, an in-depth review, or a capability tracked over time.

View all engagements
01

Reply

A document and a deadline.

QuestionnaireAnnexAuditAll responses →
02

Prepare

Verify and remediate.

EU exposureClient and technical assessmentEvidence and remediationAll preparations →
03

Maintain

Keep the current commitments.

Continuous assuranceClient assurance officeProduct security cellAll recurring services →

Basis for the conclusions

From the client's requirement to a qualified piece of evidence.

The same trail links Promise, Policy, Practice, Platform, finding, remediation and controlled sharing.

Review the 4P method

Trace

Evidence traceabilityAssurance registerTrust roomContinuous verification

Frameworks and sectors

GDPR and international accessHealth data and HDSNIS2 and the supply chainIndustrial confidentialityCountry filesExport mapAll frameworks →

View deliverables

See fictitious examples to understand the structure and depth of the deliverables.

See examples of deliverables →

Terms of engagement

Responsibilities, information and limits established before the engagement.

Confidentiality, independence, reversibility and traceability of responsibilities structure the conduct of the work.

Review the firm's rules

Trust rules

ConfidentialityIndependenceSecurityReversibility

Working with iKNSA

ExpertiseInternational engagementsRequest an engagementContact

European principals

Have an international supplier assessed under explicit mandate and sharing rules.

Assess a supplier →

Personal data

Privacy policy

iKNSA limits collection to the information needed to understand a request, respond to it and, once an engagement is agreed, carry it out.

Controller, purposes and legal basis

iKNSA is the controller for processing related to this website. The business contact details and context you provide are used to qualify and respond to your request and prepare any subsequent scoping, based on your consent to the form and the pre-contractual steps you request.

Documents and recipients

Do not send any secrets, production credentials or unnecessary personal data. Access is limited to people authorised to qualify or process the request and to technical providers strictly required for hosting, security and message delivery.

Hosting and data flows

Active data, audience measurement and backups are hosted on infrastructure located in France. iKNSA does not arrange for this data to be transferred outside the European Economic Area to operate this website. If you request an acknowledgement or resume link at an email address operated outside that area, the message is delivered to the address you chose.

Technical safeguards

Communications use HTTPS. Administrative access is assigned to named users and protected by multi-factor authentication. An attachment is isolated in quarantine, checked for type and size, scanned for malware and then encrypted at rest before storage. Backups are encrypted separately; their integrity and restoration are tested.

Self-assessment

Answers are saved on the server after the first change so that a report can be produced and resumed. The address entered to receive a resume link remains associated with the self-assessment. Self-assessments are deleted 90 days after their last update; a shared report expires after no more than 30 days.

Retention periods

Prospect enquiries and contact details are retained for no more than three years after the last exchange, unless a contractual relationship or separate obligation applies. An attachment not linked to an engagement is deleted after no more than 90 days; a rejected or quarantined file is deleted after seven days.

Backups and erasure

Encrypted daily backups are retained away from the primary server, in France, for no more than 30 days. An erasure request is applied to active data; residual copies then disappear through backup rotation. If an exceptional restoration takes place in the meantime, deletion rules are reapplied before normal service resumes.

Audience measurement

Matomo measures viewed pages, followed links and key form stages without cookies to improve the user journey. No field content, name, email address or document is sent to Matomo. This measurement is used neither for advertising nor to track anyone across other websites. You can disable or reactivate it at any time from the Cookies and local storage.

Your rights

You may withdraw your consent and request access to, rectification, erasure, restriction or portability of your data, and object to certain processing under the applicable conditions. Write to contact@iknsa.com. You may also lodge a complaint with the CNIL.