B3 logob3cyber
Paper records beside an appliance and unplugged cable. AI-generated editorial illustration.

Interactive assessment

Five questions. A clearer renewal decision.

Check what you can demonstrate before the next vendor commitment. Get a prioritized list of records to request, without an email gate.

By Braxton BarberFee-only / Buyer-side / Vendor-neutral
Start the five questionsRead the interrogation playbook
AI-generated editorial illustration. Not footage of an actual affected organization.

Vendor Exposure Scorecard

Question 1 of 5

Can you leave the contract without an operational surprise?

Look for a renewal deadline, export rights, transition help and a complete account of exit fees.

Is after-hours response a testable commitment?

Your agreement should distinguish acknowledging an alert from containing a problem, with authority and timing for each.

Can you identify and revoke every privileged vendor connection?

Include support users, service accounts, AI tools and application permissions, with a business owner for each.

Can critical work recover if the provider is unavailable?

A backup-job report is different from restoring a usable business workflow without the usual provider.

Can you obtain the evidence needed to defend the decision?

Check access to relevant logs, responsibility records, incident notices and remediation evidence before you sign.

No email gate. Answers stay in this page and reset when you reload. The score reflects self-reported evidence gaps, not breach probability or compliance certification.

Before the next signature

Make the decision with someone on your side.

Start with the decision, the deadline and the evidence you need. We will define a practical scope from there.

Schedule a 20-minute scoping call →