Supplier Security Questionnaire Answer Kit: Answer Bank, Evidence Log and Security Overview Template (UK Small Business)

Product details

For UK small businesses that get security questionnaires from customers, with or without Cyber Essentials. When a customer sends you one, this kit helps you answer it honestly and consistently, with evidence behind each answer. Then you can re-use those answers when the next one arrives.

It's built around the question areas in the NCSC's free supplier assurance questions, the five Cyber Essentials technical controls and the UK GDPR rules for processors. A dated sources list lets you check it yourself.

£39 · digital download (ZIP file).

What's inside

• Start here guide (PDF): how to set the kit up once, and what to do when a questionnaire arrives
• Question areas walkthrough (PDF): seventeen question areas. For each one, what the customer is usually asking, what an honest answer looks like and what evidence to keep
• Answer bank workbook (Excel): a row for each question with your status, your master answer and your evidence. Separate tabs hold an evidence log with renewal dates, a policy status tracker and a re-use log for each customer questionnaire
• One-page security overview (editable Word document): a short statement to send before a customer asks
• "No, but here's what we do" answer styles (editable Word document): how to answer honestly when the answer is no or partly, with fictional examples
• Before you send your answers (PDF): a one-page check

How it works

1. Click Get My Kit and check out. You'll receive a download link after payment.
2. Open the Start here guide and fill in your answer bank and evidence log once.
3. When a questionnaire arrives, use the walkthrough and your master answers to reply.
4. Run the "Before you send" check, then save a copy of what you sent and update the re-use log.

It's self-serve. You work through the files yourself, with no calls or meetings with us.

What it isn't

Secordit Intelligence doesn't review, assess or certify anyone, and never sees your answers. The kit can't make you pass a questionnaire, win a contract or become certified. Your customer decides whether your answers are enough. Only an Assessor working for a Certification Body licensed by IASME can assess and certify you for Cyber Essentials.

General information, not legal advice.

FAQ

We don't hold Cyber Essentials. Is this still useful?
Yes. The walkthrough shows how to say so plainly, then describe what you do in each of the five areas Cyber Essentials covers.

Does it include policy templates?
No. It has a policy status tracker, so you can see which policies you have and when each was last reviewed, and a one-page security overview template.

What format are the files?
PDF, Word (.docx) and Excel (.xlsx). The workbook uses standard formulas only and has been tested in LibreOffice Calc. It should also open in Excel and Google Sheets. The Word templates have been checked in LibreOffice Writer.

Who's behind it

Secordit Intelligence was set up in February 2026 by Matthew Protheroe-Hill, its director. Before that, he co-founded Sencode Cyber Security and was a director there from 2019 to 2023. Qualification: BSc (Hons) Cyber Security & Networks (1st Class), Teesside University.

Everything in the download

A ZIP with 6 files: the Start here guide (PDF), the question areas walkthrough (PDF), the answer bank workbook (Excel), the one-page security overview (Word), the "No, but here's what we do" answer styles (Word) and the "Before you send your answers" check (PDF).

The problem it helps with

When a customer sends a security questionnaire, you need honest, consistent answers with evidence behind them. This kit helps you build those answers once and re-use them when the next questionnaire arrives.

Compared with paying for help

Answering every customer questionnaire from scratch eats into time you'd rather spend on the work itself. A specialist firm or an IT consultant can fill one in for you, and they charge for their time. This kit lets you keep your answers in one place and re-use them. It's a set of templates, not a like-for-like swap for paid help.

Delivery

Digital download (ZIP file). You'll receive a download link after payment.

Ready to start? Use the Get My Kit button under the price at the top of this page.

Secordit Intelligence's own product. Not made, checked or endorsed by the NCSC, the ICO, GOV.UK, the Cabinet Office, IASME or ISO. Contains public sector information licensed under the Open Government Licence v3.0: https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/