We do not know what to ask.
Use a ready-to-send 20-question questionnaire instead of drafting a new email every time.
A practical place to begin · Version 2.0
Collect the basic facts, identify warning signs, assign an initial risk level, and decide whether a prospective vendor can proceed—or needs a closer look.
Secure checkout and immediate delivery powered by Gumroad
Who it is for
Problems it solves
Use a ready-to-send 20-question questionnaire instead of drafting a new email every time.
Follow the same guided intake and classification process for each prospective vendor.
Use initial risk tiers to identify which relationships deserve more attention.
Translate the responses into a practical next step: proceed, clarify, escalate, or perform deeper review.
What is included
Built for practical use without specialized software or a consulting engagement.
How it works
Ask the prospective vendor for the same essential business, insurance, service, and data-handling information.
Record the answers in one place rather than leaving the review scattered across email.
Use the initial Low, Moderate, High, or Critical result as a decision aid—not a substitute for judgment.
Proceed, request clarification, escalate internally, or move to a more detailed vendor assessment.
Practical uses
Frequently asked questions
No. The Starter Kit is focused on the initial pre-screen. The complete toolkit adds full inventory, tiered due diligence, evidence review, remediation, monitoring, reporting, and offboarding.
Yes. The PDF questionnaire is designed to be completed electronically or printed.
No. It provides a consistent starting point. The user should consider the facts, business context, unanswered questions, and any professional advice needed.
Microsoft Excel or compatible spreadsheet software is required for the workbook, plus a PDF reader for the instructions and questionnaire.
Related practical guidance
This is a general business resource intended to help organize internal reviews and decisions. It is not legal, insurance, cybersecurity, or regulatory-compliance advice and does not guarantee compliance with any requirement.
Need a complete process?
The Third-Party Vendor Risk Toolkit adds tiered questionnaires, evidence review, documented approvals, remediation, monitoring, reporting, and offboarding.
Practical Business Works, LLC