With the many rules that apply today, it makes good sense to screen both current and new IT vendors. Imagine that you need a new administrative system provider for your business. What parameters do you choose after today?
- They have a good reputation
- I've used them before
- They have industry knowledge
Arguments that can be quite excellent. But maybe you should look them a little more in the seams.
In connection with the supervision of suppliers / data processors, which Unitas performs for a number of customers, it is clear that not all suppliers have yet woken up completely to the modern requirements that you as a customer should and must make to your supplier. Therefore have Unitas prepared an inspection procedure as well as an inspection form that also in the context of the GDPR ensures that you choose a safe supplier.
A secure provider is a provider that has control over its internal policies, guidelines, technical and organizational measures where data is stored, whether uncertain third countries are used, whether your data processor is adequately supervised. subcomputers etc.
By using the surveillance form you quickly get a picture of how serious the suppliers are about security. It is security about you and your employees or customers' data. And it is you who is responsible for this data. Therefore, it is extremely important for you as a data controller that you choose the right suppliers.
If you have existing suppliers that you want to check, the same procedure is used. Maybe it's time for a chat with your supplier based on the answers you receive?
Suppliers will certainly be challenged. But this is the competition parameter of the day, and you quickly find out if you have your eggs in a safe or unsafe nest.
Unitas hopes to be able to help you and your company with data protection as well as with facilitating the task of supervising the data processors. The more the data processor takes its task seriously, the easier you will get it.
If you are part of a larger company with a separate purchasing or sourcing department, you may want to share this post with your colleagues in those departments as it also greatly affects them.
If you need assistance with screening new suppliers or supervising existing suppliers, you are most welcome to contact us.