We procured the services of Prism Infosec to produce and subsequently refresh a supplier questionnaire on the security controls planned for hosted and cloud-based systems being tendered to the Council. Prism Infosec worked with us over a number of iterations of the questionnaire, aligning the questions to current Government / NCSC and regulatory requirements (such as the DPA and GDPR) and they worked hard to ensure that we were completely satisfied that the deliverable would work for both our prospective suppliers as well as ourselves.
Business Analyst, Gloucestershire County Council