Home
Forms Library
Fillable Outsourcing Security Assessment Questionnaire

Fillable Outsourcing Security Assessment Questionnaire 2026

Fillable Outsourcing Security Assessment Questionnaire Preview on Page 1

See details

4.3 out of 5

60 votes

The document is an Outsourcing Security Assessment Questionnaire for Hosting Service Providers used by Marshall University's Office of Information Technology. It outlines the necessary information and security controls required for hosting services, including data classification, authentication methods, data security measures, recoverability objectives, operational controls, and incident response procedures. The questionnaire aims to ensure that hosting service providers meet the university's security standards and protect sensitive data.

Here's how it works

01. Edit your form online

Type text, add images, blackout confidential details, add comments, highlights and more.

02. Sign it in a few clicks

Draw your signature, type it, upload its image, or use your mobile device as a signature pad.

03. Share your form with others

Send it via email, link, or fax. You can also download it, export it or print it out.

How to use or fill out Fillable Outsourcing Security Assessment Questionnaire

Ease of Setup

DocHub User Ratings on G2

Ease of Use

DocHub User Ratings on G2

Click ‘Get Form’ to open the Fillable Outsourcing Security Assessment Questionnaire in our editor.
Begin by filling out the 'Service/Software/System Description' section. Provide the name and a short description of the service, along with details about the sponsoring MU unit and key contacts.
Move to the 'Security Controls' section. Here, answer questions regarding data recovery, ownership of works created, and authentication methods. Be thorough in your responses to ensure clarity.
In the 'Data Security' section, confirm whether all network transfers of MU Restricted Data are encrypted. This is crucial for compliance and security.
Proceed to 'Recoverability' and 'Operational Controls'. Answer each question regarding backup plans, physical security measures, and employee vetting processes.
Finally, complete the 'Incident Response' section by detailing your processes for reporting security incidents and handling data requests from third parties.

Start using our platform today to efficiently fill out your questionnaire for free!

be ready to get more

Complete this form in 5 minutes or less

Get form

Got questions?

We have answers to the most popular questions from our customers. If you can't find an answer to your question, please contact us.

What is a vendor risk assessment questionnaire?

A vendor risk management questionnaire (also known as a third-party risk assessment questionnaire or supplier risk assessment questionnaire) is designed to help organizations identify potential weaknesses among vendors and partners that could result in a breach.

What is a security assessment questionnaire?

Security assessment questionnaires help businesses ask the right questions to vet potential partners and make better third-party hiring decisions.

What is the SIG questionnaire?

The Standardized Information Gathering (SIG) questionnaire was created to help outsourcers manage third-party risks, including cybersecurity risks, operational risks, data governance risks, and supply chain risks, among others.

What is consensus assessments initiative questionnaire?

A Consensus Assessment Initiative Questionnaire (CAIQ) is an industry standard assessment designed to document and help organizations assess the important administrative, technical and physical security controls that are relevant to cloud computing.

What is a health risk assessment questionnaire?

A health risk assessment (also known as a health risk appraisal) is an instrument used to collect health information, typically coupled with a process that includes biometric testing to assess an individuals health status, risks, and habits. Alone, an HRA can do little to improve health or cut costs.

Security and compliance

At DocHub, your data security is our priority. We follow HIPAA, SOC2, GDPR, and other standards, so you can work on your documents with confidence.

Learn more

What is TPRM assessment?

Third Party Risk Management (TPRM) (also called Vendor Risk Management or VRM) is the practice of evaluating and then mitigating the risks introduced by vendors (suppliers, third parties, or business partners) both before establishing a business relationship and during the business partnership.

What are the 5 steps of security risk assessment?

An SRA helps identify your most significant security risks, prioritize mitigation efforts, and save money and resources. This five-step process begins by defining the scope and identifying critical assets. It is followed by threat and vulnerability identification, risk analysis, prioritization, and documentation.

What is a TPRM questionnaire?

What is a TPRM questionnaire? A TPRM (Third-Party Risk Management) questionnaire assesses the risks associated with third-party vendors, focusing on cybersecurity, data protection, and regulatory compliance.

Fillable Outsourcing Security Assessment Questionnaire 2026

Here's how it works