Supplier and Processor Due Diligence Assessment

A structured due diligence framework for assessing suppliers and processors who handle personal data, access institutional systems, or provide services with an information security dimension. Replaces informal or ad hoc approaches with a repeatable, documented process aligned to UK GDPR Article 28, the Data Protection Act 2018, and the Data (Use and Access) Act 2025. 

The framework covers three complementary areas: Part A data protection due diligence, Part B cyber security due diligence, and Part C a combined assessment record bringing both evaluations together in a single decision document.