Supplier Due Diligence Attestation Checklist

Use this supplier due diligence and attestation checklist to evaluate third party vendors on information security, privacy, business continuity and disaster recovery, outsourcing practices, fraud and corruption controls, and modern slavery risk. Capture annual evidence such as security frameworks, penetration testing or certifications, BCP testing, business impact assessments, disaster recovery results, and data protection policies. Confirm control reviews, incident reporting, legislative compliance, and designate accountable roles like privacy officer to ensure resilient and compliant supplier relationships.