Direct answer
Ask for specifics, not slogans: authentication, roles, data protection, testing, updates, backups, incident handling and data ownership.
Questions to ask
- How are users authenticated and permissions controlled?
- How is data encrypted and backed up?
- How are vulnerabilities found and fixed?
- What logging and audit exist?
- Who can access production data?
- What happens in an incident?
Compare the answers
Send these questions to each vendor and compare answers before selecting a supplier.
Continue exploring
Frequently asked questions
What is the short answer?
Ask for specifics on access, data protection, testing, backups and incident response.
What should a business do next?
Send these questions to each vendor and compare answers.