Live workspace. Durable storage schema active — live connectors, billing, and AI automation are activation-gated.View Activation Status
Signed out
Sign in as the approved QA user before running RLS-bound QA.
Sign in
Back to control matrix
Read-only automation evaluation - no live writes

Supplier security assessment

Suppliers within scope must undergo a security assessment proportional to their risk.

ISO 28000
SC-1
supply chain

Readiness evaluation

Gap
high
Automation rationale
Deterministic explanation from evidence, gaps, and open findings.
No required evidence type is verified at high confidence.
Required evidence
Evidence types expected for this control.
vendor doc
attestation
Linked evidence
Sample evidence mapped to this control.

Supplier security questionnaire — Acme Logistics

Partially completed supplier questionnaire — sections on encryption missing.

Pending review

Confidence: low · Owner: Sam Okafor

Linked findings
Open or historical findings mapped to this control.
medium
Awaiting evidence

Incomplete supplier security evidence

Request completed sections from the supplier and re-review.

Recommended remediation workflow
Preview recommendation only; no workflow instance is created here.

Request missing evidence

Request evidence required to close a control gap. SLA 120h.

Open workflow template
Audit trail placeholder
Future live audit trails will show reviewer decisions, evidence refreshes, and workflow transitions.
Catalog imported: ISO 28000
Last evaluated: May 29, 2026
Mode: local deterministic preview