Larger clients run every supplier through procurement, and procurement runs a security questionnaire. Recruiters hold identity documents and salary data, so the questions are not going to get lighter. These five answers, ready in advance, are the difference between a signed PSL and a stalled one.
Cyber Essentials certified, or a dated plan to be
The certificate on file, or a written plan with a date that you can put in front of the client.
Data encrypted at rest and in transit
Confirmed for every system that holds candidate data, including the file share and the email archive.
A written breach-notification process
Who is told, in what order, within what time, and who notifies the ICO and the client.
A supplier security questionnaire answered and ready, not drafted on request
A completed standard questionnaire kept current, so the client's version is a copy-across, not a scramble.
Annual renewal diarised
Certification, the questionnaire and the process document all reviewed on a fixed date each year.
Answer before you're asked
A questionnaire returned the same day says more about your desk than any pitch. Batiq&Co prepares the answers, the process documents and the Cyber Essentials plan so procurement is a formality.
Book a 30-min consultationBatiq&Co is a commercial compliance and contracts consultancy, not a law firm. General guidance, not regulated legal advice.