Enterprise Security Assessment > Risk and Security Management > Risk Assessment and Treatment

Do you have an assigned individual responsible for relevant issues in regards to third-party risk management?

e.g. with responsibility for capturing, maintaining, and tracking subcontractor Information Security, Privacy, or other issues?

book reader icon
1 Minute
12/05/2024
facebook logo gray
linkedin logo gray
mail logo gray
Yes. As a small LLC, all of QR Planet's operational partners are constantly monitored by management directly in regards to all relevant potential risks and issues, without the need of a formalized third-party risk management program.
Last update 1 week ago

Do you have a formalized Risk Governance Plan that defines Enterprise Risk Management program requirements?

Yes. IT security policies, incident management, regular external security testing, and extended liability and cyber insurance are in place.

Do you have a documented program for managing third-party risks in place?

No. As a small LLC, all of QR Planet's operational partners are known to management and are being carefully assessed and monitored. No formalization necessary.

Do you depend on any critical third-party service providers?

Yes. We depend on our ISO 27001-certified infrastructure provider, Hetzner, who is based in Germany and is a leading provider for cloud computing.

Do you have formal agreements for third-party providers in place regarding the immediate notification of any disruption of services?

Formal agreements have been established for third-parties to provide immediate notification of a disruption that impacts any of their services rendered to us.