GIBP

Due diligence

Give procurement, risk and security the evidence they need.

Public material answers the first layer. Detailed architecture, security, regulatory and data-flow material can be routed to the appropriate team and may be subject to confidentiality.

Architecture

System boundaries, target execution architecture, capability maturity and data-flow context.

Security

Public controls, responsible disclosure, resilience approach and deeper materials where appropriate.

Regulatory position

Current operating status, planned regulated boundaries and activity-specific caveats.

Data & privacy

Website processing, subprocessors and service-specific diligence material where available.

Request the appropriate pack.

Choose “Security / due diligence” in the contact form and describe your procurement stage and required evidence.

Request diligence material