Topics

Topics — one chain file, every questionnaire out of it

What is your situation? Choose the situation that matches your company. Each topic answers one question, with the reference in the regulation included.

General and business

• What is the statutory name of the undertaking?
• Under which registration number is the undertaking registered?
• What is the registered office of the undertaking?
• In which sector is the undertaking active?
• How many employees does the undertaking have?
• What is the annual turnover of the undertaking?
• In which countries does the undertaking have establishments?
• Does the undertaking have a business liability insurance?
• Is the undertaking ISO 9001-certified?
• Does the undertaking have a plan to continue operations in case of serious disruption?
• Do the online services of the undertaking comply with accessibility requirements?
• Does the undertaking use AI systems in its service delivery?
• Is a digital product passport available for the supplied products?
• why does one customer have something different than another when the question is the same
• who is allowed to approve the answers here before they are sent
• customer sends questionnaire in English or German, does that work too
• the system does not understand a question from the list, what happens then
• I clicked yes but the answer was not correct, can I fix that
• do I have to upload it myself at my customer or does the system do that
• I have five questionnaires in, can I get them all done at once
• there is a question for which no answer has been recorded at all, what now
• how often do I need to update my data and answers to stay current
• does my customer get his own format back or does the layout change
• can I process multiple questionnaires at once
• what file format must my questionnaire have to upload
• can I fill in the answer differently than in my file
• who in our company must approve the answers before we submit
• do I have to submit the completed list myself to my customer's portal
• does supplia log in to our customer's portal to fill in something
• Does anyone at supplia read our completed questionnaire
• Does supplia award a certification or score to our answers
• Who is responsible if an answer in the file is incorrect
• We are receiving a questionnaire from a new customer for the first time, what should we do
• How does the system know this is the same question as with another customer
• We have already submitted but the answer has since changed, what now
• Can multiple colleagues update the supply chain file simultaneously
• Our customer sends a questionnaire in English or German, does that work
• The customer asks to upload a certificate or attachment, is that possible
• There is no answer yet in our file for this question, what happens then
• How quickly is a questionnaire processed after uploading
• Can the answer be automatically reformulated differently per customer
• Do all our locations have one shared file or each their own
• Our customer has amended the questionnaire, do we need to start over
• Can I look up the answers we gave to this customer last year
• The system links the wrong answer to a question, how do I correct that
• What does supplia actually not do, where does your role end
• Can one customer see which answers we gave to another customer
• How does the system know which answer matches which question
• What if the questionnaire asks something that is not in our file
• Do I need to review each answer before I submit it
• Who must upload the questionnaire from our customer
• Two customers ask almost the same thing but worded slightly differently
• Can I temporarily adjust an answer for this one customer
• The customer portal does not accept the exported file
• Does it also work if the questionnaire is a PDF or Excel
• Who ultimately submits the answer to the portal
• What should I do if an answer in the file is outdated
• Who within our company may amend the file
• How much time does this system actually save with questionnaires
• Can I see what we filled in last time
• The question does not entirely match our standard answer
• How do I give a new employee access to the file
• Are old completed questionnaires kept or deleted
• Customer wants a signature or declaration with the answer
• Can different locations have different answers
• What happens if I reject an answer with no
• Must I re-approve each amended answer
• Can the system handle a questionnaire in two languages
• What if there is no answer yet to a question asked
• can I have the questionnaire reviewed by a colleague first
• how often do I need to keep the file up to date
• the customer asked additional questions after submission
• two customers are actually asking the same question but phrased differently what should I fill in
• the answer that was automatically filled in is no longer correct what should I do
• I upload a PDF with questions but the system does not recognize the questions well
• who must approve the answers internally before they are submitted
• what happens if I click no on an answer that the system suggests
• the questionnaire asks about something for which there is no answer in my file at all
• my customer sends a questionnaire in English or German can the system recognize that
• who in our company can view or modify the supply chain file
• can two colleagues fill in or confirm the same questionnaire at the same time
• the questionnaire contains a question that does not apply to our situation at all what do I fill in
• can I see what we answered last year with this customer on the same questionnaire
• the questionnaire is an Excel file with multiple tabs will that be recognized
• the system has linked the wrong question to the answer from my file how do I correct that
• can I attach a certificate or policy document as an attachment to an answer
• the questionnaire asks for a short explanation next to the answer can that also be automatic
• why do I have to figure everything out again every year because the questionnaire format is different
• we have multiple subsidiaries do I have to fill in the questionnaire separately for each company
• my customer does not have a portal and wants the completed questionnaire back by email
• can I have three questionnaires from different customers filled in at once
• do I get the questionnaire back in the same Excel or PDF format as I uploaded it
• can I manually change an answer that was automatically filled in
• I click no on an answer what should I do then
• who ultimately submits the completed questionnaire to my customer's portal
• does supplia itself log in to my customer's purchasing portal
• does an employee of supplia read the questionnaire I have uploaded
• how do I update the supply chain file if something changes in my company
• a question is not included in the file can I add it myself
• can multiple employees from my company log in to the same account
• do I get a certificate or seal from supplia for my answers
• who checks the answers before they go to my customer
• can I also upload a questionnaire in English or German
• can I see an overview of all questionnaires I have completed this year
• two customers are asking the same question worded slightly differently what does the system do then
• can I upload a scanned PDF questionnaire or does it have to be a Word file
• a question has a follow-up question if you select yes how does that work
• can I export a separate file with all my standard answers
• does a director have to approve the questionnaire before it is submitted
• my customer uses a portal that is not yet known, can it be added
• my customer has modified the questionnaire, do I have to do everything again
• my file is not yet complete, can I still have a questionnaire filled in
• who is responsible if a completed answer later turns out to be incorrect
• each customer requests their own format, can this system handle that
• how do I upload the questionnaire I received from my customer
• the system does not recognize a question from the list, what should I do
• is the completed list automatically submitted to my customer's portal
• do I have to give you my login details for the customer portal
• how do I ensure that the chain file contains current information
• can multiple colleagues fill in the chain file together
• what happens if there is no answer in the file yet for a question
• do you verify or certify whether my answers are correct
• does someone from the platform review the questionnaire I upload
• can I process questionnaires from multiple customers side by side
• where can I find the questionnaire I submitted last year
• my customer sends the questionnaire in English, does that work too
• can I also upload a PDF or Excel file from my customer
• the procurement department of my customer sends a different list than sustainability, does that belong here too
• may I give a more detailed answer for one than for the other
• how long does it take before an uploaded questionnaire is filled in
• can I see afterwards who confirmed a particular answer
• my customer modified the questionnaire after I had already started, what now
• how do I add a new colleague who is also allowed to process questionnaires
• may our external advisor fill in the questionnaires on our behalf
• how can I have our chain file and account deleted
• how does this system work exactly, what happens when I upload a list
• can I still modify the completed answer before I submit it
• who must confirm the answers with us before submission
• do I have to submit the list myself or do you do that for me
• what is that single chain file that everything is filled in from
• why do I have to keep filling in the same questions for different customers
• I click no for an answer, what happens to that question
• do you log in yourselves to my customer's portal
• who is responsible if an incorrect answer is submitted
• do you also issue a certificate or score about our company
• how do I keep the data in my file up to date
• who can access our data in the file
• the list asks for something for which there is no answer in my file
• can a colleague or advisor do this on my behalf
• my customer is now using a different form than last year, what should I do
• can multiple locations of our company use the same file
• how are answers to a questionnaire filled in automatically
• can I upload the questionnaire from my customer's portal here
• I received a VSME list from my customer, what should I do
• why do I suddenly have to complete a sustainability questionnaire for my customer
• I don't have time to complete that entire ESG questionnaire
• my customer wants me to return the sustainability list quickly, how do I do that
• what data do I need to collect to complete a sustainability questionnaire
• do I have to answer the same sustainability questions again for each customer
• do I as a small business also have to complete an ESG questionnaire from my customer
• what do I fill in if I don't know the answer to a sustainability question
• what is VSME and why do I have to complete it
• why do I have to answer sustainability questions as a supplier
• am I as a small business required to complete this questionnaire
• why am I receiving questions that are not relevant to my business
• my customer sends me a sustainability questionnaire and I've never completed this before, what now
• how do I know if the list I receive is a VSME list or something more extensive
• why do I as a small business have to answer sustainability questions for a large customer
• I receive a different sustainability questionnaire from each customer, do I have to figure this out each time
• do I as a supplier have to complete sustainability questions from my customer
• why do I suddenly have to provide sustainability data to my customer
• what do I fill in if I don't know the answer to an ESG question
• do I have to provide ESG figures per location or for the entire company
• I don't have figures from last year, what do I fill in on the sustainability list
• do I as a small business have to complete a sustainability questionnaire
• what is the difference between a VSME and CSRD questionnaire
• my customer has their own sustainability format, how do I complete it quickly
• I don't have sustainability figures, what should I fill in
• am I required to complete the ESG questionnaire from my customer
• what are the consequences if I don't complete the ESG questionnaire
• may I fill in an estimate if I don't have exact figures
• my customer wants me to complete EcoVadis, how do I approach that
• why do I as a small business have to complete a sustainability questionnaire
• I don't have a sustainability report but still have to complete a list
• what do I fill in if a question on the list does not apply to me
• each customer has a different questionnaire, how do I avoid duplicate work
• may I provide an estimate if I don't have the exact figures
• do I have to complete VSME or CSRD, what is the difference
• completing a sustainability questionnaire for the first time, where do I start
• my customer sent me a VSME questionnaire what do I need to do now
• I don't have time to fill in this sustainability questionnaire myself
• why do I get a different sustainability questionnaire from each customer
• we are a small business why are we receiving ESG questions from our customer
• can I use the same answers for the next questionnaire from a different customer
• I don't know these figures may I enter an estimate in the questionnaire
• my customer wants supporting documents for the answers to the sustainability questionnaire
• do I need to fill in this sustainability questionnaire completely again each year
• who in my company should fill in the customer's sustainability questionnaire
• can I have problems if my answer to the questionnaire is incorrect
• who is responsible for filling in the security questionnaire
• may I give a different answer to one than to another on the same question
• what if I accidentally give a wrong answer in my customer's questionnaire
• customer asks for supporting documents for each answer in the questionnaire what do I send
• my customer's questionnaire is completely unsuitable for a small business like ours what now
• I keep filling in the same answers for different customers how can I do this faster
• who is responsible for filling in customer questionnaires about security
• customer asks for supporting documents for the answers to the questionnaire
• I gave a wrong answer to my customer's questionnaire what now
• customer asks for the signature of the management on the questionnaire
• do I need to provide an organogram when opening an account
• why does the insurer want to know exactly what my business does
• why does the bank ask for my actual business address and not my postal address
• how do I explain my shareholder structure to the bank
• why does the insurer need my number of employees
• what proof must I provide that my business address actually exists
• do I need to report whether I use subcontractors for the insurance
• what does the bank mean by the purpose and nature of the relationship
• why does the bank ask about intermediaries in my business
• must I report that another insurer previously refused me
• what must I enter for the purpose and nature of the business relationship
• how do I describe the group structure to the bank
• which countries do I enter for the question about business activities
• why does the bank want to know how many employees I have
• bank wants an organigram of my holding and subsidiaries how do I make that
• which SBI code must I enter in the insurer's questionnaire
• bank wants to know how many staff my business has why is that necessary
• insurer asks who my main customers are must I disclose that
• why do I need to answer so many questions with my insurance advisor
• bank asks about the industry of my end customers why is that relevant
• bank sends new questionnaire after acquisition of my company is that necessary
• bank asks who is authorized to sign on behalf of the company how do I answer that
• company moved to different address do I need to fill in all bank details again
• insurer wants to know what secondary activities my company has what do I enter
• do I have to report all branches of my company to the bank
• do I have to notify that my company has a different main activity
• bank sends the same questionnaire every year do I really have to do it again
• new bank requests all kinds of documents when opening account which ones are they
• bank wants to see an organizational chart of our holding and subsidiaries
• the KYB questionnaire from the bank is different this year than last year how can that be
• switching to another insurer and filling in a complete questionnaire again why
• a new director joins our company does the bank need to know that
• insurer wants to know how many employees we have what number do I provide
• onboarding asks for our SIC code or industry code which one do I enter
• bank wants to know the actual business address instead of PO box what do I enter
• we have multiple trading names do I have to report all of them at onboarding
• insurer wants to know in which countries we do business how do I answer that
• bank wants to know the structure of parent and subsidiary companies how do I describe that
• we just hired a new director do I have to notify our bank
• form asks if another bank has ever rejected us what do I enter
• insurer asks for a description of the insured interest what do I write
• form asks if our company has ever gone bankrupt what do I answer
• how do I describe our business activities for the insurer without errors
• do we have to fill in all onboarding questionnaires again after an acquisition
• what do I have to enter in the questionnaire for our liability insurance
• why does the bank want to know exactly how many employees we have
• how do I prevent having to fill in the same company details repeatedly
• what do I have to enter about burglary protection for business insurance
• why do I have to tell the new insurer which policies we already have
• how do I explain to the bank how our company structure with subsidiaries works
• do I have to notify that another insurer rejected us earlier
• why does the bank want to know which other companies we are affiliated with
• why do I have to provide an organizational chart of my company to the bank

ESG — environment

• What is the total energy consumption per year?
• What proportion of energy consumption comes from renewable sources?
• What is the direct greenhouse gas emission (scope 1)?
• What is the indirect emission from purchased energy (scope 2)?
• What is the emission in the value chain (scope 3)?
• Has the company set a target to reduce emissions?
• How much waste does the company produce per year?
• What proportion of waste is collected separately?
• What is the water consumption per year?
• Does the company have the required environmental permits?
• Are there facilities in or next to a protected natural area?
• customer asks about scope 1 2 and 3 emissions, how do I fill that in correctly
• questionnaire wants energy consumption per location, we only have a total
• customer wants to know how we separate and reduce waste, what do I fill in
• the questionnaire asks for scope 1 2 and 3 emissions but that is not in my file
• how do I calculate the CO2 emissions per turnover of my company
• how do I calculate the emissions from my vehicle fleet for a sustainability questionnaire
• how much packaging material does my company use per year
• does my company have a policy for circular or sustainable procurement
• does my business location have an impact on biodiversity
• is my business premises at risk of flooding or drought due to climate change
• I don't know my CO2 emissions what should I fill in
• how do I determine climate risks for my company
• what is our impact on biodiversity as a company
• how much of our raw materials are recycled or circular
• how do I answer questions about packaging material and sustainability
• how do I calculate emissions from transport and logistics
• how do I answer the question what climate risks my company faces
• questionnaire asks about impact on biodiversity, what does that mean for my company
• how do I answer the question whether we use hazardous substances in our production process
• customer wants to know what proportion of our raw materials is recycled, how do I determine that
• what do I fill in for scope 1 if I don't have my own vehicles
• customer asks whether we purchase circular materials
• how do I answer the question about impact on biodiversity of our location
• customer asks about policy on reducing packaging material
• how do I calculate CO2 emissions per turnover
• does my company use hazardous or harmful substances question
• what climate risks does our company face question fill in
• should commuting be included in emissions
• how much packaging material do we use question fill in
• customer wants to know CO2 emissions per turnover, how do I calculate that
• I lease a building and don't know my energy consumption, what do I fill in
• should I report the emissions from my vehicle fleet in the questionnaire
• does packaging material fall under the waste question in the list
• I don't need an environmental permit, what do I fill in for that question
• no natural area nearby, how do I answer the biodiversity question
• customer asks about climate risks, how do I determine those for my company
• Should I calculate CO2 emissions per turnover or per employee
• I have no separate energy meter, how do I enter energy consumption then
• Should I include company vehicles in the CO2 emissions statement
• Should I include packaging material in the environmental questionnaire
• Our building is rented, so whose energy consumption goes in the report
• We don't need an environmental permit, what should I enter for that question

ESG — social

• How many work-related accidents with absence have occurred in the past year?
• Does the company have a policy for health and safety at work?
• Is the workforce covered by a collective labour agreement?
• Does the company pay all its employees at least the statutory minimum wage?
• What is the male-female distribution within the workforce?
• How many training hours does an employee receive on average per year?
• Does the company have a policy on human rights in its supply chain?
• Does the company have a code of conduct for its own suppliers?
• Can employees and supply chain partners report misconduct through a fixed channel?
• questionnaire asks about diversity in our workforce, how do I approach this
• how do I answer questions about working conditions further in my supply chain
• customer wants to see our supplier code of conduct, do we need one
• the questionnaire asks about working conditions with our own suppliers
• how do I calculate staff turnover for a questionnaire
• what percentage of my workforce is flexible or temporary staff
• does my company measure employee satisfaction and how do I report that
• does my company need a diversity policy for the questionnaire
• how do I calculate the sickness absence percentage for a sustainability list
• how do I know if child labour occurs with my suppliers
• does my company have a policy for the local community around the site
• how do I calculate sickness absence percentage for the questionnaire
• how do we calculate staff turnover percentage
• what is our diversity in management and leadership
• how do I determine the remuneration difference between men and women
• should I include self-employed and flexible workers in workforce data
• do we have employee participation or a works council arranged
• what is our impact on the environment or local community
• how do I answer questions about accommodation for migrant workers
• questionnaire asks about diversity in management, what should I enter here
• should I indicate whether we have a policy for work-life balance of staff
• questionnaire asks how we contribute to the local community, what do they mean by this
• customer wants to know if we monitor working conditions with our subcontractors
• questionnaire asks how we ensure that child labour does not occur with our suppliers
• how do I enter diversity management in ESG questionnaire from customer
• customer asks how many employees with disabilities we have
• do self-employed workers and temporary workers count in personnel questions ESG list
• how to calculate staff turnover for sustainability questionnaire
• how do I calculate wage difference between men and women for ESG questionnaire
• customer asks about work from home policy in sustainability questionnaire
• customer asks how we exclude child labour from suppliers
• enter percentage of women in management ESG list
• enter percentage of flexible workers in customer questionnaire
• do we monitor working conditions at suppliers question
• do we have a diversity policy question to fill in
• how do I calculate my sickness absence percentage for the questionnaire
• I have a small team, do I also need to answer personnel questions
• do I need to count self-employed workers in personnel questions
• the list asks for a diversity policy, do I need to have that as a small business
• customer asks about wage difference between men and women, how do I fill that in
• no employee satisfaction survey conducted, what do I answer to that question
• customer asks about migrant workers in the supply chain, how do I approach this

ESG — governance

• Does the undertaking have a policy against bribery and corruption?
• Has the undertaking been convicted of corruption or bribery in the past five years?
• Does the undertaking have an internal reporting channel for whistleblowers?
• Is there a procedure for reporting conflicts of interest?
• Does the undertaking verify its relationships against applicable sanctions lists?
• Does the undertaking maintain a record of processing activities?
• Does the undertaking conclude data processing agreements with its service providers?
• Has a data breach occurred in the past two years that had to be reported?
• questionnaire wants to know who is on our board and how it is composed
• customer asks if we have a reporting procedure for misconduct, how do I fill that in
• questionnaire asks about our anti-bribery policy, what is a good answer
• the questionnaire asks if we have a whistleblower scheme what do I fill in
• how diverse is my management or board, what do I enter for the list
• do I need to make the remuneration policy of management transparent for the questionnaire
• who is responsible in my company for ESG or sustainability
• does my company have risk management for sustainability and ESG
• how do I describe the composition of our board
• do we need to have an official sustainability policy in writing
• how do I answer questions about management remuneration and ESG
• who is internally responsible for sustainability and ESG
• how do I integrate sustainability risks into our risk management
• customer asks about our remuneration policy for management members, do I need to fill that in
• questionnaire asks if we have a risk management system, what counts as an answer to that
• customer asks if our supervisory oversight is organized independently, what does that mean for a small business
• customer asks if we have a documented sustainability policy, and we don't have it in writing
• questionnaire asks who within our company is responsible for esg, what do I enter if no one has that role
• who do I enter as ubo in esg or customer questionnaire
• asks customer to clarify board composition in questionnaire
• do I need to share remuneration policy for board members in esg questionnaire
• do I need to submit sustainability policy as a separate document to customer
• how do I fill in board structure in esg questionnaire
• do I need to fill in management remuneration policy in customer questionnaire
• do we have independent board members question to fill in
• who is responsible for esg within the company question
• I am the only board member, how do I answer the question about board diversity
• does the list ask about management remuneration, do I need to fill that in
• what should I fill in when asked about transparent tax policy

Cyber and NIS2

• Does the enterprise have a policy for risk analysis and the protection of information systems?
• Is there a procedure for handling security incidents?
• Are there back-ups and contingency measures to restore service delivery?
• Does the enterprise impose security requirements on its own suppliers?
• Is there a process for identifying and remediating vulnerabilities?
• Is the effectiveness of security measures periodically assessed?
• Do employees receive training in basic cyberhygiene practices?
• Is there a policy on the use of cryptography and encryption?
• Is access policy documented, including the management of business assets?
• Is multi-factor authentication used for access to business systems?
• Is the enterprise ISO 27001-certified?
• Does the enterprise itself fall under the NIS2 Directive or its national transposition?
• Are events in the systems recorded and retained?
• customer asks how we respond to a cyberincident, how do I fill that in
• questionnaire wants to know how we regulate access to systems, what do I answer
• how do I answer the question about our notification procedure in case of a data breach
• customer asks for results of our latest pentest, do we need to provide them
• my customer sends an extensive nis2 questionnaire while that wasn't the case before what should I do with it
• our customer wants to know if we fall under NIS2, what do I fill in
• our insurer wants to fill in a cybersecurity questionnaire for the policy
• customer asks if we use antivirus or endpoint protection
• questionnaire asks what our password policy looks like
• what do I fill in regarding network segmentation
• do we need to inform our customer if there has been a data breach
• questionnaire asks if we have conducted a penetration test
• how do I fill in the question about security when working from home
• questionnaire asks about the security of our cloud provider
• what do I enter for the question about data classification
• questionnaire asks whether we screen employees before hiring
• how do I fill in the question about physical security of our data center
• questionnaire asks how we respond to a ransomware attack
• how do I enter that we revoke access of departing staff
• questionnaire asks how we manage risks from our suppliers
• questionnaire asks who within management is responsible for cybersecurity
• how do I enter that employees can report a security incident
• questionnaire asks about our patch policy for software updates
• what do I enter for the question about encryption of data at rest and in transit
• questionnaire asks whether our company has taken out cyber insurance
• we don't have an ISO certificate, how do I answer that question well
• our customer is subject to NIS2 and now sets requirements for us, what does that mean
• how do I fill in the question about data minimization for personal data
• questionnaire asks about our recovery time after a cyber incident
• how do I fill in the question about VPN and secure remote access
• my insurer wants a cybersecurity questionnaire, how do I fill that in
• customer asks if we have had a pentest performed, what should I answer
• we don't have a CISO, who do I enter as responsible for security
• customer asks if we perform phishing tests with employees, what if we don't
• questionnaire asks about our password policy, must it be documented in writing
• customer asks how we secure remote work, what do I enter there
• questionnaire asks whether laptops are encrypted, how do I know for sure
• must we report a security incident from last year to our customer
• customer wants to know how our cloud provider is secured, what do I enter there
• we are not ISO 27001 certified, what do I write in the questionnaire
• questionnaire asks whether employees work via VPN, how do I substantiate that
• customer asks which antivirus or endpoint protection we use
• questionnaire asks whether our network is segmented, what does that mean
• customer asks whether we revoke access of former employees immediately, how do I prove that
• questionnaire asks about financial impact of previous cyber incidents, what do I enter
• customer asks which suppliers have access to our systems
• questionnaire asks whether our website uses SSL or TLS, how do I check that
• customer asks about our mobile device policy, what do I enter there
• we must demonstrate that we check our suppliers for cybersecurity, how do I do that
• questionnaire asks whether we have reported incidents to a supervisory authority
• customer asks about our recovery time after a system outage, what do I enter there
• customer asks how our office wifi is secured, what do I write there
• questionnaire asks for security contact person, who should that be at our company
• the customer asks how we classify sensitive information, what is our answer
• questionnaire asks how quickly we install patches, what do I enter
• each customer sends their own cyber questionnaire, how do I approach this cleverly
• my cyber insurer sends an extensive questionnaire, what must I fill in
• I don't understand a technical question from the questionnaire, who can answer this
• my customer asks for supporting documents with the questionnaire, what must I provide
• is filling in this questionnaire the same as complying with NIS2
• my client falls under NIS2 and I don't, what does that mean for me
• we don't have an IT department, who should fill in this security questionnaire
• I don't know the answer to a question, can I enter no
• the questionnaire asks whether we have had a penetration test carried out
• the questionnaire asks whether we have a SOC or SIEM, what does that mean
• the questionnaire asks whether we have had a cyber incident in recent years
• how do I describe our password policy in the customer's security questionnaire
• the questionnaire asks how we secure working from home and remote access
• the questionnaire asks about our policy for mobile devices and laptops
• the questionnaire asks how we monitor the cyber security of our own suppliers
• the questionnaire asks where and how we store the customer's data
• the questionnaire asks whether data is encrypted when transmitted and stored
• we are not ISO 27001 certified but we do a lot for security, what do I enter
• the questionnaire asks whether we have a crisis plan for a cyber incident
• the questionnaire asks who within our company is responsible for cybersecurity
• I keep receiving almost the same questionnaire from different customers, should this be faster
• the questionnaire asks how we revoke access when an employee leaves
• the questionnaire asks whether we use a firewall and antivirus, how do I answer that
• filling in this security questionnaire takes me far too much time every time
• the questionnaire asks how long we retain our system logs and log files
• my insurer wants to see a pentest report, what must I provide
• customer wants to know if I report incidents within 24 hours
• they ask who our CISO is but we don't have anyone with that title
• customer asks whether we carry out phishing tests on employees
• they want to know what our password policy looks like
• how do I show that all our laptops are secured
• they want to know how we secure working from home
• they ask in which country our data is stored
• questionnaire asks whether we classify data according to sensitivity
• they ask who has access to their data
• must I report a data breach to the customer whose data it concerns
• customer wants to know how often we have our systems tested
• we are not certified but the questionnaire asks for it anyway
• they ask if our business network is segmented into divisions
• customer asks how we secure employee mobile devices
• should we ask the same cybersecurity questions to our own suppliers
• customer asks if we are insured against cyber damage
• they ask if our employees log in with a single login to everything
• they ask for our complete security policy as a document
• they ask how our office wifi network is secured
• questionnaire asks about risks in our supply chain, what does that mean
• do I need to send our response plan as a document to the customer
• my customer asks if we fall under NIS2 what should I fill in
• insurer asks security questionnaire for cyber insurance what should I do
• each customer has a different security questionnaire do I have to start over each time
• customer asks about our password policy what should I answer
• do I need to report a security incident from last year in the questionnaire
• customer asks for pentest results but we have never done a pentest
• customer asks about security of our cloud provider what should I answer
• questionnaire asks which antivirus or endpoint protection we use
• customer asks how we revoke access from employees who have left
• customer wants us to sign a statement about security is that allowed
• customer asks who our CISO is but we don't have a separate role for that
• questionnaire asks if we conduct phishing tests with our staff
• customer asks how we arrange access for external suppliers or freelancers
• questionnaire asks about policy for mobile devices and laptops of employees
• customer asks how we are protected against attacks via our suppliers
• questionnaire asks if our data is encrypted at rest how do I know that
• customer asks how quickly we would notify them of a data breach
• we don't have a formal security policy can I still answer yes to the questionnaire
• insurer wants to fill in questionnaire for cyber insurance how do I tackle that
• each customer sends a different questionnaire how do I keep track of this
• customer asks if we have had a penetration test carried out what do I say
• customer asks about our password policy what should be in it
• questionnaire asks if home work stations are secured what do I answer
• do I need to report a hack or data breach to my client
• questionnaire asks if accounts of departed employees are blocked
• customer wants to know if our cloud service is sufficiently secured what do I answer
• questionnaire asks about network segmentation what does that mean and what do I fill in
• questionnaire asks if we conduct phishing tests among staff
• questionnaire asks how we monitor the security of our suppliers
• questionnaire asks about physical security of server room or data center
• questionnaire asks if management is involved in cybersecurity
• questionnaire asks whether the business continuity plan has been tested what answer should I provide
• questionnaire asks about data classification what should I fill in
• questionnaire asks about antivirus software or endpoint protection what should I say
• questionnaire asks how quickly we implement security updates
• my customer asks whether I fall under NIS2 what should I answer
• our insurer wants to fill in a cybersecurity questionnaire for the policy
• questionnaire asks about our password policy how should I answer that
• questionnaire wants to know which antivirus or endpoint protection we use
• customer asks whether our data is encrypted during storage and transmission
• customer asks how we secure remote work and BYOD what should I enter
• questionnaire asks about firewall and network segmentation how should I answer
• questionnaire asks how we would report a data breach to them
• customer asks how we manage access of external suppliers
• customer asks whether we have recently had a penetration test carried out
• questionnaire asks whether we are insured against cyber incidents
• questionnaire wants to know which cloud services we use for our data
• questionnaire asks whether we have drawn up an incident response plan
• customer wants to know whether we carry out phishing simulations with employees
• questionnaire asks how quickly we implement updates and patches
• customer asks about the physical security of our server room
• questionnaire asks whether we have a business continuity plan
• customer wants to know who is responsible for cybersecurity at our company
• questionnaire asks how we map risks in our supply chain
• questionnaire wants to know whether we classify data according to sensitivity

Financial and KYB

• Are the annual accounts of the company deposited?
• Who are the ultimate beneficial owners of the company?
• Is any of the directors or beneficial owners a politically exposed person?
• Is the company or any of its directors on a sanctions list?
• What is the source of the company's assets?
• Which banks does the company hold accounts with?
• What is the average payment term to suppliers?
• Does the company have a current credit rating?
• bank asks for the ultimate beneficial owners of our company how should I fill that in
• insurer asks about our financial health what should I enter
• why does the bank ask completely different questions than the insurer when it is about the same thing
• in the questionnaire there is a request for the UBO where is that answer in my file
• how does payment work do I pay per completed questionnaire or a fixed amount per year
• why does my bank want to know what I use the account for
• why does my insurer ask about my expected revenue
• bank wants to know where the money from the first deposit comes from
• how do I estimate the expected transaction volume for my bank
• why do I need to disclose the countries where I conduct business
• why does the bank want to know who my customers are
• how do I provide my claims history to a new insurer
• why does the bank ask about foreign tax liability
• why does the bank want to know exactly what the loan is for
• why does the bank ask if I am connected to other customers
• why does the bank ask how much I will pay internationally
• why does the bank ask about financing from abroad
• why does the bank want to know how much cash I receive
• do I need to indicate whether I rent the premises or own it
• how do I provide an expected cashflow when opening an account
• how do I prove where my start-up capital comes from
• why does the bank ask if I have foreign customers
• bank wants to know if my business receives cash payments
• how do I estimate the expected transaction volume for the bank
• must I inform the bank if my shareholders change
• what business code do I provide to my insurer
• what do I fill in for the question about collateral for financing
• bank asks if I have business relationships with a high-risk profile
• why does the bank ask if a director has previously gone bankrupt
• how do I provide previous claims history to the insurer
• what do I fill in for the source of incoming payments
• why does the bank ask if I have crypto activities
• what if a family member of the director is a politically exposed person
• how do I describe the purpose of the loan to the bank
• how do I fill in the sales forecast for my insurer
• do I need to name my main suppliers to the bank
• how do I substantiate why I need financing
• what do I fill in for the question about equity of my business
• how do I explain the insurable interest to the insurer
• bank asks for expected annual turnover when opening an account what do I fill in
• insurer asks which countries I trade with what do I provide
• bank asks if my business accepts cash payments what should I say
• bank asks questions about a large payment on my account how do I respond
• why does the bank send the same questionnaire again each year
• insurer wants to know what claims my business had previously what do I fill in
• bank asks for the source of the first deposit on the business account
• bank asks for the tax residence of the business what should I fill in
• why does my insurer want to know how much assets my business has
• bank asks if I manage money from others what should I say about this
• bank wants to know what I use the business credit for what do I write
• bank asks questions about cryptocurrency use within my company what do I answer
• why does the insurer ask if my company owns real estate
• why must I provide so many documents to my bank
• insurer asks for my turnover figures what must I enter
• what questions do I get when I open a new business bank account
• bank wants to know what the risks are in my sector
• do I do business with countries that are considered high risk
• bank asks where my company's start-up capital comes from
• what must I enter for expected transaction volume for the bank
• must I indicate whether I receive cash payments from customers
• what questions does the insurer ask for liability insurance
• must I inform them which countries I do business with
• insurer wants to know if I have previously claimed damages
• bank asks if my company has contracts with the government
• what must I enter as the purpose of the account at the bank
• must I inform them if there is a new director at my company
• credit insurer asks for an overview of my debtors
• must I indicate that my company trades in cryptocurrency
• why does the bank want to know how many staff I have
• bank asks for a declaration regarding tax liability abroad
• must I inform them if there is a new shareholder
• must I mention crowdfunding as a source of financing
• insurer asks for a breakdown of turnover per business activity
• what do I enter if the bank asks for expected cash flow
• bank wants to know what the purpose of the business account is what must I enter
• insurer asks for turnover data for the policy why is that necessary
• bank wants to know how much money goes through the account per month what do I enter
• credit insurer asks for data about our customers and debtors
• bank asks about countries we trade with what is the risk of this for them
• new insurer asks about damage history from recent years what do I enter
• insurer wants to know how many staff we employ for the policy
• bank asks a question about cryptocurrency activities of our company what do they mean
• bank wants to know if we do business with high risk sectors what falls under this
• insurer wants to know if we have other activities besides our main activity
• bank wants to know how our liquidity is now what must I provide
• insurer wants to know if we use subcontractors what does this have to do with the policy
• insurer wants to know how much turnover we make per country why is that relevant
• bank asks for detailed explanation of the purpose of the business loan
• bank wants to know if our company has contracts with government institutions
• insurer asks questions about exports abroad, what should I fill in
• insurer asks about our expected annual turnover, which figure should I provide
• bank asks where the money from the first deposit comes from, what should I answer
• bank wants to know if we are going to transfer money abroad, how should I fill that in
• bank asks about cash payments in our company, what should I say
• we are applying for a credit limit and need to justify it, what should I write
• bank asks how many transactions we expect per month, which number should I provide
• insurer asks who our main customers are, should I mention names
• bank wants to know who our largest suppliers are, how should I fill that in
• bank asks if we trade with countries on a risk list, what should I answer
• insurer wants to know our claims history from recent years, how should I fill that in
• onboarding asks how much we expect to grow in coming years, what should I fill in
• bank asks if we use crypto in our business operations, what should I answer
• bank asks about the expected use of the account, how should I fill that in
• insurer wants to know the ratio between equity and debt, what should I fill in
• why do I have to fill everything in again from scratch at a new bank
• what kind of questions do you get from the bank when applying for a business credit line
• why do I have to explain what we are going to use the business account for
• what does KYB mean and why do we get such a questionnaire from the bank
• why does the bank ask if we do business with customers outside the Netherlands
• how do I determine the value of our machines and inventory for insurance
• why do I have to account for where the money for starting the business comes from
• why does the bank want to know how much cash flows through our company
• why do I have to break down turnover by country for the insurer
• why do I have to provide turnover figures for business insurance
• why do I have to submit so many documents for a new business account
• what should I fill in for expected transaction volume per month
• why do I have to explain why I am sending money abroad
• which industry or SIC code should I fill in for the insurer