Vendor Due Diligence Questionnaire
What This Template Is
The Vendor Due Diligence Questionnaire (DDQ) template provides a comprehensive, structured questionnaire for evaluating third-party vendor risk before onboarding or during periodic reassessment. It covers financial stability, operational capability, cybersecurity posture, regulatory compliance, data protection, business continuity, and ESG practices — with built-in scoring and red flag detection.
Who Should Use It
What It Contains
When to Use It
- Before onboarding a new vendor — especially high-risk vendors handling sensitive data or providing critical services
- During annual or risk-based periodic reassessments of existing vendors
- When a vendor's services change materially — new data access, new geographies, new subcontractors
- When regulatory requirements change and mandate updated due diligence
How to Use It
Select the DDQ template within the Questionnaires & Assessments module and configure it for the vendor's risk tier
Customize sections based on the vendor's services — enable cybersecurity for IT vendors, ESG for supply chain vendors
Distribute to the vendor via the assessment workflow with a response deadline
Review responses with automated scoring, evaluate red flags, and conduct follow-up clarifications if needed
Generate a risk assessment from the responses and make an onboarding or continuation decision with documented rationale