← Toolkit
TPL-120QuestionnaireThird-party risk

Supplier due diligence questionnaire

Fifteen questions calling for evidence, not statements.

Continuity, dependencies, security, financial soundness, exit. Each question states the expected evidence and the red flag associated with an evasive answer. Designed for critical suppliers only — sending it to every supplier makes it useless.

How to use it

  • Reserve it for critical suppliers
  • Require the test report, not an attestation
  • Ask what share of their revenue you represent

Courses that use it

TP-101

Third-Party Risk Fundamentals

TP-201

Due diligence and contract clauses

Related templates

TPL-101

DORA register of information

Relational structure: entities, arrangements, providers, functions, sub-outsourcing.

TPL-105

ICT contract clause set

Common baseline and enhanced clauses for critical functions.

TPL-121

Third-party register and concentration matrix

Three-tier segmentation and cross-referencing of shared dependencies.

TPL-122

Provider exit plan

Four verifiable elements, including a tested data extraction.