Open Source Vendor Security Asessment
-
Over the past year or so, I have been looking for a decent interactive questionnaire to send to vendors. I have been using Excel spreadsheets which isn't ideal. I came across VSAQ, which is google's solution. I must say it is very well put together, and it is almost like giving a full security assessment to the vendor.
Check out the project here:
https://opensource.googleblog.com/2016/03/scalable-vendor-security-reviews.html
Check out the demo here:
https://vsaq-demo.withgoogle.com/I have already built our server and starting tweaking the .json files for our needs.