Workflows / Supplier evaluation
Supplier evaluation
Starts when
A task of this type is created, or yearly per supplier
Stage 1
Request
ZY
4 fields
Stage 2
Due diligence
BCQL
3 checklist items5 days
Stage 3
Risk rating
ZY
Qyro drafts2 days
Stage 4
Approval
ZYBC
Both sign
Stage 5
Annual review
Planner check
Stage 2 · Due diligence
- Assigned to
- BCQLBalraj Chohan, Quality lead role
- Completion
- Any one of them
- Due
- 5 working days after stage 1
- Checklist
- Security questionnaire · ISO 27001 or Cyber Essentials certificate · DPA signed
- Evidence
- Required for each checklist item
- Form
- Hosting location, data processed, sub-processors
- Escalation
- Workflow owner, 3 days late
- Conditions
- Skip the DPA item if no personal data is processed