IT Vendor Security Assessment Form

IT Vendor Security Assessment Form — Form Fields

This operations template includes 10 fields. Assess the information security posture of IT vendors before onboarding or contract renewal. Free to customize and use on ZenBuild.

• Vendor Name (text, required)
• Reviewer Name (text, required)
• Reviewer Email (email, required)
• Assessment Date (text, required)
• Vendor Access Level (dropdown selection, required) — options: Internet-Facing Only, Internal Systems Access, Privileged/Admin Access, Physical Access, Data Processing
• Security Controls Verified (checkboxes, optional) — options: SOC 2 Type II, ISO 27001, MFA Enforced, Data Encryption at Rest, Data Encryption in Transit, Penetration Testing Done, Incident Response Plan
• Vendor Has Signed Our DPA? (multiple choice, required) — options: Yes, No, In Progress
• GDPR or CCPA Compliance Verified? (multiple choice, required) — options: Yes, No, N/A
• Findings and Risk Notes (long text, required)
• Risk Rating (dropdown selection, required) — options: Low, Medium, High, Critical