Supplier questionnaire

Hi, I need help to produce the following for suppliers that we work with, I need to confirm the correct questions to send out, risk scoring and a policy. Below are questions for supplier regarding their security posture.

• Confirm which of the following do you have in place: Firewall? IDS or IPS? Secure configuration? Anti-virus/Malware Protection? EDR/MDR/XDR? Patch Managements? Access Control? Multi-Factor Authentication? Email spam filtering? Network behaviour Monitoring?
• Do you know what devices connect to your network and who has access?
• Do you follow any security frameworks?
• Do you have cyber essentials?
• Do you do conduct vulnerability and penetration testing?
• Do you have backups? • Do you have security and acceptable use policy?
• Do you have information and security policies in place?
• Do you have access control policies in place? • Do you conduct cyber security awareness training?
• Do you have a disaster recovery plan? • Do you have an incident response plan?
• Do you have anything in place with your supply chain to combat a cyber-attack?