The essential terms around RFPs, tenders and security questionnaires.

The management that keeps operations running during disruptions and crises.

The sequence in which providers apply for a contract.

BSI methodology for a systematic level of information security.

BSI auditing standard for the security of cloud services.

Standardised questionnaire by the Cloud Security Alliance for cloud providers.

Control framework by the Cloud Security Alliance for cloud security.

EU regulation for digital operational resilience in the financial sector.

**Data protection law and the contract governing data processing agreements.**

Careful examination of a provider before a partnership begins.

Supervisory IT requirements for insurers and banks.

German auditing standard for the internal control system of service providers.

Term defined by DORA for IT and communication services provided to financial entities.

International auditing standard for controls over outsourced processes.

The systematic management of information security in a company.

The leading international standard for information security.

The systematic audit of IT systems, processes, and controls.

Supervisory requirements for the business organisation of insurance companies.

Supervisory minimum requirements for the risk management of banks.

EU directive for stronger cybersecurity in essential sectors.

Planned tests that verify the effectiveness of emergency and recovery plans.

Transferring tasks to external providers, often heavily regulated.

A controlled attack that exposes vulnerabilities in systems.

Managing all offers from request to close.

Proof of successful projects that builds trust with new customers.

The preliminary inquiry used by a client to explore the market.

The formal request to submit a specific proposal.

The pure price inquiry for a clearly defined service.

Two key metrics that define how quickly and with how much data loss a system must be restored.

A standardised set of questions a customer uses to assess a provider's information security.

Comprehensive standard questionnaire for evaluating the security of providers.

A US audit standard for the secure handling of customer data.

The systematic assessment of providers against fixed criteria.

The process companies use to manage the risks posed by their providers.

The structured review of a provider by the customer.

The proportion of time a system is available, typically guaranteed as a percentage.