Rowan & Vale, a twenty-five-person accountancy firm buying a new client-portal system, compares three shortlisted suppliers on the security questions that matter — keeps our data safe, commits in writing, good track record, we can get our data back — with green ticks, amber queries and red crosses. Supplier B, which protects the firm's data, stands out as the safest choice, while the cheapest, Supplier C, fails most questions. Beside it, the short before-you-sign checklist, and the reminder that buying isn't done at signing: keep an eye on them and know how to leave.

CY-BEGINNER-080Beginner · Secure Procurement

The Shortlist — Buying Suppliers and Software Without Bringing In Risk

When you buy software, a service, or a supplier, you bring their security into your business. So treat a purchase as a security decision: ask before you sign, choose who'll protect your data, put it in writing, check they're real, give only the access they need, don't just chase price, and keep it up.

11 hours8 chapters32 lessons225 activities8 labs

What you'll learn

See a purchase as a security decision, and ask the security questions before you sign, while you still have the leverage.
Treat 'will they protect our data' as the question the whole purchase turns on, and get the commitments in writing.
Check a supplier is genuinely real, and give suppliers only the access and data they need.
Know why the cheapest isn't the safest, and treat buying safely as ongoing — a light eye on suppliers, and leaving well.

Price:৳5,000