What is the difference between encryption at rest and encryption in transit?

Encryption at rest is like storing your data in a vault, encryption in transit is like putting it in an armoured vehicle for transport.

For encryption in transit, the data is encrypted before transmission; the computer system endpoints are then authenticated; and the data is decrypted and verified on arrival. This is to protect data if communications are intercepted while data moves between two computer systems. For encryption at re…

What is the difference between hardware and software tokens?

A hardware token is a small physical device. A software token is a virtual piece of software that is installed on a users electronic device, such as a mobile phone. Both tokens generate a single-use code to use when accessing a platform.

Two-factor authentication is a security process which requires the user to provide two different authentication methods to verify themselves when accessing a web platform. Single-factor authentication is your username and password. Two-factor authentication is recommended because it adds extra secur…

1. To set up a software token on your mobile phone, go to the 'How do I configure two-factor authentication' help page and follow the instructions
2. To request a hardware token, go to the 'How do I get a hardware token' help page and follow the instructions


If you have any further questions regar…

What is the Cyber CS-1 Guideline?

A common set of minimum security guidelines created by a team of OEM Chief Information Security Officers (CISO) including FCA, Ford, General Motors, Honda, and facilitated by the Automotive Industry Action Group (AIAG), which apply to all 3rd Parties who handle an OEM's data in an external environment.

These security requirements focus on the secure exchange and protection of information between the OEMs and their business partners, and are known as the AIAG Cyber CS-1 Guideline.



If you have any further questions regarding the SupplierAssurance platform, please use our Live Web chat where our s…

Why have I received an invitation to complete a questionnaire?

You have received an invitation because one of your customers would like you to complete a questionnaire or share a questionnaire that you or someone from your organisation has already completed on the platform.

Your customer(s) may need you to complete a questionnaire on the platform about a topic or policy area that is important to them. This may be a mandatory requirement as part of their supplier selection process or for compliance management and reporting purposes. You need to use the correct invitatio…

1. If you are the correct person to complete the questionnaire and you do not have an account on the platform, follow the instructions on the 'How do I register my organisation' help page
2. If you already have an account on the platform go to the 'Sign in' page and enter your login details
3. Go to…

Can I re use answers from a similar previously completed questionnaire?

Yes, if you have previously completed a similar questionnaire you can re-use the answers when you start a new questionnaire.

The questionnaires on the platform are designed to cover a defined scope such as a location, a product or a contract. As such you may be required to complete multiple questionnaires for one or more of your customers. Where questionnaires cover policy and process information, you may want to re-use t…

1. Go to your dashboard
2. Locate the SAQ you wish to complete
3. Select 'Respond'
3. Use the 're-use answers from another questionnaire' link when it is shown on the questionnaire introduction page
4. Select the questionnaire you wish to 're-use' the answers from and select 're-use'
5. Edit any ans…