Mark each task from current evidence
Use Not applicable only when the item genuinely does not apply, and follow the site’s approved escalation process for any urgent condition.
Organization and security goals
Explain what the organization needs the service to accomplish.
Site and operating conditions
Give the provider enough context to plan while protecting sensitive information.
Incident and risk context
Use current, objective information to explain why coverage is being considered.
Service duties, reporting and proposal format
Define how proposed service will operate and how the buyer will evaluate it.
Complete the checklist to see a summary
Results are informational and do not certify compliance or eliminate risk.