{"title":"Home page","description":null,"products":[{"product_id":"vendor-security-assessment-pack-50-question-nist-mapped-questionnaire-excel-guide","title":"Vendor Security Assessment Pack — 50-Question NIST-Mapped Questionnaire (Excel + Guide)","description":"\u003cp\u003e\u003cstrong\u003eAssess any vendor's security in one sitting — without building the questionnaire yourself.\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThe Vendor Security Assessment Pack gives you a complete, ready-to-send third-party security questionnaire: \u003cstrong\u003e50 questions across 10 sections\u003c\/strong\u003e, covering governance, access control, data protection, network security, logging \u0026amp; monitoring, incident response, business continuity, physical security, personnel security, and compliance \u0026amp; audit.\u003c\/p\u003e\n\u003cp\u003eEvery question is mapped to the frameworks your auditors and customers actually use:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNIST SP 800-53 Rev. 5\u003c\/strong\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cstrong\u003eISO\/IEC 27001:2022 Annex A\u003c\/strong\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cstrong\u003eSOC 2 Trust Services Criteria\u003c\/strong\u003e\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003ePCI DSS v4.0.1\u003c\/strong\u003e (only where the requirement genuinely applies)\u003c\/li\u003e\n\u003cli\u003e\u003cstrong\u003eNIST CSF 2.0\u003c\/strong\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eIt scores itself.\u003c\/strong\u003e Vendors answer Yes \/ Partial \/ No \/ N\/A. Critical questions carry double weight, N\/A answers are excluded fairly, and the Score Summary tab produces a weighted score, a suggested risk tier (Low \/ Medium \/ High \/ Critical), and a per-section breakdown that shows exactly where a vendor is weakest.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eReviewer guidance is built in.\u003c\/strong\u003e Each question includes a \"What good looks like\" note — the specific evidence a strong answer should produce — so reviews stay consistent no matter who runs them.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat's inside\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eVendor_Security_Assessment_Workbook.xlsx\u003c\/strong\u003e — instructions, the full 50-question assessment with response dropdowns and automatic scoring, and the Score Summary dashboard.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eVendor_Security_Assessment_Guide.docx\u003c\/strong\u003e — a step-by-step administrator guide: how to run an assessment, how scoring and tiers work, and reviewer tips.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eWho it's for:\u003c\/strong\u003e companies onboarding SaaS, cloud, or IT vendors that need a defensible security review; security \u0026amp; compliance leads building a third-party risk management (TPRM) process; consultants who need a client-ready questionnaire today, not next month.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eLicense:\u003c\/strong\u003e single-organization license — use the pack for your own vendor assessments, unlimited times. Templates support your security program; they are not legal or audit advice and do not guarantee any audit outcome.\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003eWritten and maintained by practicing consultants at Zee Consulting.\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eCopyright \u0026amp; licence.\u003c\/strong\u003e © 2026 Zee Consulting. All rights reserved. The materials in this product are the intellectual property of Zee Consulting. Your purchase grants a single organization a non-exclusive, non-transferable licence to use and customize them for its own internal business purposes. They may not be resold, redistributed, shared, published, or provided to any other organization, in whole or in part, in original or modified form. Unauthorized use constitutes copyright infringement and breach of licence, and may result in litigation and liability for damages and legal costs. Full terms are included in the download (Copyright_and_Licence_Terms.docx).\u003c\/p\u003e","brand":"Zee Consulting","offers":[{"title":"Default Title","offer_id":67819519869115,"sku":"ZEE-VSA-001","price":149.0,"currency_code":"CAD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0777\/6570\/5915\/files\/vendor-security-assessment-pack-cover.png?v=1792678895"}],"url":"https:\/\/zeeconsulting.myshopify.com\/collections\/frontpage.oembed","provider":"Zee Consulting Templates","version":"1.0","type":"link"}