When clients ask.
WHEN THIS ARISES
A larger customer assessing you as a supplier A contract requiring security commitments A customer concerned after an incident elsewhere
WHAT THEY USUALLY ASK
How you protect their data Who has access What happens if you are breached Whether you have backups What your incident process is
WHAT TO HAVE READY
Short honest answers to each.
WHAT NOT TO DO
Overstate Claim certifications you do not hold Copy answers from elsewhere
WHY
Claims become contractual, and they are checked.
WHAT AN HONEST ANSWER LOOKS LIKE
What you actually do, plainly.
A small business doing the basics well answers credibly.
WHAT TO IMPROVE FIRST
Anything you would be embarrassed to state.
That is your actual priority list.
WHAT TO DOCUMENT
Your answers, so they are consistent.
WHAT TO REVIEW
Annually, against what you actually do.
