IT Vendor Risk Self-Assessment

Use this checklist to evaluate the reliability and transparency of your current IT vendors. Mark any statements that are not true for your business relationships.

Assessment Questions

• We have a signed service-level agreement (SLA) with each provider
• Response times and escalation paths are clearly defined
• We receive regular performance or service reports
• Our provider adheres to recognized security standards
• Subcontractors (if any) are disclosed and vetted
• We perform annual reviews of vendor performance
• We can access support or account contacts easily
• Our provider conducts regular backup and recovery tests
• Vendor pricing is consistent and free of hidden costs
• We are notified of any incidents or disruptions immediately

If you identify 3 or more items that are not in place, it may be time to review your vendor relationships more closely.