cyberaffinity

Free tool

Vendor Risk Quick Check

About to sign with a new vendor? Answer eight questions to see how much scrutiny they deserve, what to ask them for, and how often to check back. Everything runs in your browser — nothing is sent anywhere.

What they'll touch

1. What's the most sensitive data the vendor will store or access?
2. What access will they have to your systems?
3. If this vendor went down for a day, what would happen?

What they can show you

Answer "Not sure" if you haven't asked yet — that's useful too.

Result

Answer the first three questions to see a risk tier.

How it works

Questions 1–3 measure impact: how much harm a problem at this vendor could do to you. That sets the starting tier. Questions 4–8 measure assurance: how much evidence the vendor gives you that they're managing that risk. Missing or unknown assurance can raise the tier by one level.

This is a quick triage guide to decide how much diligence a vendor needs — not a formal third-party risk assessment. Your contracts, regulators, and customers may require more.