Supplier risk guides
Practical know-how for procurement, information security and compliance. With steps, checklists and legal duties with their source. You can apply all of it without software.
Articles
NIS2 and NISG 2026: duties for the supply chain
The Austrian NISG 2026 requires essential and important entities to secure their supply chain. This guide shows what that means in practice, for customers and for suppliers.
Sanctions screening: traceable and with sources
Sanctions screening compares business partners with official lists of sanctioned persons and organisations. Here you find the lists, the steps and how to handle matches.
Supplier assessment: steps, criteria and template
A supplier assessment rates suppliers against fixed criteria, regularly and traceably. Here you find the steps, criteria, weighting and a template.
Supplier self-disclosure and security questionnaire: what belongs in it
In a supplier self-disclosure, a supplier describes its company along your questions. Here you learn what belongs in it and how to check the answers.
Third-party risk management (TPRM) explained
Third-party risk management, TPRM for short, means identifying, assessing, monitoring and documenting risks from third parties. Third parties include suppliers, service providers and partners.
DORA: ICT third-party risk in practice
DORA is the EU regulation on digital operational resilience in the financial sector. It has applied since 17 January 2025 and also governs how financial entities manage ICT third-party providers.
Glossary
Key terms from DPA to fourth parties, briefly explained.
Legal information, not legal advice. For your own case, please ask a professional. The German version is binding.
Assess your first suppliers today.
Free covers up to 10 suppliers, without payment or term. Above 500 suppliers we prepare a quote.