Audit methodology · Last verified
Vendor Security Alliance Questionnaire
The Vendor Security Alliance Questionnaire is a free, self-assessment vendor security questionnaire issued by a non-profit coalition of companies. The alliance's own home page states it publishes two versions, VSA-Full and VSA-Core, updated annually, and that any interested company may apply for membership.
- Class
- Audit methodology
- Owner
- Vendor Security Alliance (VSA)
- Last verified
What it is
"The Vendor Security Alliance (VSA) is a coalition of companies committed to improving Internet security."
"The VSA was formed to solve these issues and streamline vendor security compliance."
"The VSA issues two free questionnaires, which will be updated annually: VSA-Full"
"VSA-Core: This questionnaire...comprises the most critical questions on vendor security in addition to privacy."
"The first questionnaire was released on October 1st 2016."
The base questionnaire is filled out by the vendor itself; VSA's own page also describes a paid membership service under which member companies "may leverage our network of third party auditors" and answers are "audited by an experienced auditor" — this is a network of auditors VSA arranges, not an independent, accredited certification body attesting to the vendor.
Who owns it
"The VSA is organized as a non-profit organization. Any company interested in our mission may apply for membership."
Sources
- Vendor Security Alliance — home page ↗ — accessed
Last verified:
This page is for information only; it does not accredit, certify or endorse any organisation. Requirements and programs change — always confirm against the primary source linked above.