RCMWhat is this service?
The supplier review qualifies the roles, verifies the clauses and proportions the controls to the criticality of the service.
France
Morocco
Subsequent
Who is he addressing?
SMEs using SaaS, hosting providers, HR, marketing or support providers with access to data.
Commonly encountered problems
- Insufficiently documented responsibilities or decisions.
- Information dispersed across multiple teams and tools.
- Contracts, practices and evidence that do not tell the same story.
What the mission includes
Supplier register, risk grid, article 28 review, deviations and remediation plan.
What the customer must provide
Contracts, DPA, list of processors, location and security proofs available.
Typical unfolding
Frame
Scope and people.
Examine
Facts and evidence.
Produce
Analysis and deliverables.
Forward
Decisions and follow-up.
Important Limitations
RCM does not perform a penetration test and does not replace a technical security audit.
RCM provides compliance and DPO support. RCM is not a law firm. When specialized legal consultation or litigation representation is necessary, it must be entrusted to an authorized professional.
Frequently asked questions
How much time should you allow?−
The typical lead time is 1 to 4 weeks. It depends on the availability of interlocutors and evidence.
What is the starting price?+
The price starts from €750 excluding tax. A proposal specifies the scope, exclusions and timetable.
Does the service ensure compliance?+
No. Compliance depends on the organization’s ongoing practices and decisions. RCM advises, documents and helps reduce gaps.
Talk about your situation
Present the context, timeline and actors. We will tell you if this service really meets your needs.
Request scoping →