Your practical dashboard
Work securely with your suppliers.
Understand dependencies, limit access and coordinate during incidents – with templates and review questions for procurement, IT and business owners.
Supplier templates
Three editable pages for one important supplier. Complete and review them with procurement, IT and the business owner.
- Supplier profile and critical dependencies
- Access review and revocation at contract end
- Reporting contacts and a fictional practice case
How to use the templates
Start with a supplier important to your business. Record only necessary categories and restricted internal references, never passwords. Assign owners and review dates. Completing a form does not grant approval. The PDF is a print template without digital form fields.
Five review questions
Discuss the questions for a specific supplier. Open a question, agree the next action and record it in the template.
Which service is truly critical?
Identify the affected business activity and impact of an outage. Use this to prioritise review and a realistic fallback.
What data and access are necessary?
Record purpose, necessary permissions, owner and end date. IT reviews safeguards and revocation.
What evidence fits the service?
Check scope and currency. A general certificate does not answer every question about your specific service.
Who reports an incident to whom?
Check the contact, deputy, fallback channel and agreed response times. Test reachability together.
What happens when things change or the contract ends?
Review new people and subcontractors. End access and verify agreed data return or deletion.
A discussion guide without a score. It does not test systems or replace a full supplier assessment.
Incidents & joint exercises
Prepare a joint response: these free CyberDecisionLab tools support incident checklists and exercise planning.
Exercise idea: remote support fails
A provider reports a possible account compromise. The impact on your systems is unclear. Who verifies the report, who decides with IT about access and fallback operations, and when is the next update due?
Use fictional data for exercises. Do not enter credentials or confidential incident details into external tools.
Supply chain training
Practise decisions about external contacts, data sharing and reporting routes, with a knowledge test and participation record.
Templates, review questions and tools can be used without booking training.
Sources & usage notes
Paragamix GmbH · 12.09.2026 · Version 1.0
This toolkit supports basic organisational preparation. Tailor the review to the service, data and risk. It is not a complete supplier assessment or confirmation of legal compliance.