Security is a serious business and the closer the commercial relationship, the more serious it gets. So, while effective for evaluating a would-be vendor or supplier, the default tools and processes for assessing third-party cyber risk are probably insufficient when identifying the right business for delivering something as all-encompassing as your customer experience.

This guide is designed to help you identify genuine data and information security best practices in any prospective outsourcing partner.