--- title: Supplier & Vendor Risk | Axil Tech description: Manage the security risk your suppliers bring, keep your supplier register current every month, and choose new security or network vendors on evidence rather… image: https://www.axiltech.com.au/hubfs/logo-png/axil-tech-logo-colour-share.png --- [Skip to content](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#main-content) ![Axil Tech](https://www.axiltech.com.au/hubfs/axil-tech-logo-colour.svg)Homepage - [Home](https://www.axiltech.com.au?hsLang=en-au) - [Services](https://www.axiltech.com.au/start-here?hsLang=en-au) - [Network & Security](https://www.axiltech.com.au/services/network-security?hsLang=en-au) - [Wireless Design](https://www.axiltech.com.au/services/wifi?hsLang=en-au) - [Governance, Risk & Compliance](https://www.axiltech.com.au/services/governance-risk-compliance?hsLang=en-au) - [Cloud, Microsoft 365 & Identity](https://www.axiltech.com.au/services/cloud-microsoft-365?hsLang=en-au) - [Resilience & Incident Readiness](https://www.axiltech.com.au/services/resilience?hsLang=en-au) - [Retainers & vCISO](https://www.axiltech.com.au/services/ongoing-support?hsLang=en-au) - [Post-Quantum](https://www.axiltech.com.au/services/post-quantum?hsLang=en-au) - [Accreditations](https://www.axiltech.com.au/accreditations?hsLang=en-au) - [Resources](https://www.axiltech.com.au/resources/cyber-insurance-checklist?hsLang=en-au) - [Contact](https://www.axiltech.com.au/contact?hsLang=en-au) [Get started](https://www.axiltech.com.au/start-here?hsLang=en-au) - [Home](https://www.axiltech.com.au?hsLang=en-au) - [Services](https://www.axiltech.com.au/start-here?hsLang=en-au) - [Network & Security](https://www.axiltech.com.au/services/network-security?hsLang=en-au) - [Wireless Design](https://www.axiltech.com.au/services/wifi?hsLang=en-au) - [Governance, Risk & Compliance](https://www.axiltech.com.au/services/governance-risk-compliance?hsLang=en-au) - [Cloud, Microsoft 365 & Identity](https://www.axiltech.com.au/services/cloud-microsoft-365?hsLang=en-au) - [Resilience & Incident Readiness](https://www.axiltech.com.au/services/resilience?hsLang=en-au) - [Retainers & vCISO](https://www.axiltech.com.au/services/ongoing-support?hsLang=en-au) - [Post-Quantum](https://www.axiltech.com.au/services/post-quantum?hsLang=en-au) - [Accreditations](https://www.axiltech.com.au/accreditations?hsLang=en-au) - [Resources](https://www.axiltech.com.au/resources/cyber-insurance-checklist?hsLang=en-au) - [Contact](https://www.axiltech.com.au/contact?hsLang=en-au) [Get started](https://www.axiltech.com.au/start-here?hsLang=en-au) [Home](https://www.axiltech.com.au/?hsLang=en-au)›[Services](https://www.axiltech.com.au/start-here?hsLang=en-au)›[Governance, Risk & Compliance](https://www.axiltech.com.au/services/governance-risk-compliance?hsLang=en-au)›Supplier & Vendor Risk # Supplier & Vendor Risk Manage the security risk your suppliers bring, keep your supplier register current every month, and choose new security or network vendors on evidence rather than sales pitches. [Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#book) ## 3 services on this page ### Supply Chain & Third-Party Risk Assessment An assessment of the security risk your key suppliers and service providers bring, with a risk register and the contract and questionnaire controls to manage it. **Typical duration:** 2 weeks [See scope](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#supply-chain-and-third-party-risk-assessment) ### Third-Party Risk Retainer Ongoing third-party risk management: your supplier risk register kept current, with supplier assessments carried out as you need them. **Typical duration:** Monthly retainer, no lock-in [See scope](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#third-party-risk-retainer) ### Vendor Selection & RFP Advisory Independent technical advice when selecting a security or network vendor: requirements, RFP technical content, response evaluation and a recommendation. **Typical duration:** 2–4 weeks [See scope](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#vendor-selection-and-rfp-advisory) ## Supply Chain & Third-Party Risk Assessment An assessment of the security risk your key suppliers and service providers bring, with a risk register and the contract and questionnaire controls to manage it. **Who it's for:** Organisations with critical suppliers, or customers asking how you manage supply-chain risk. **Typical duration:** 2 weeks **Price:** typically A$8,100–14,500 ex GST **Backed by:** CISSP (see [what these accreditations mean](https://www.axiltech.com.au/accreditations?hsLang=en-au)) ### Includes - Supplier criticality classification - Security questionnaire issued to critical suppliers and responses assessed - Supplier risk register with recommended controls - One readout session (up to 60 minutes, online) ### Size limits - Up to 6 critical suppliers assessed in depth ### Excludes - On-site supplier audits - Legal review of contracts - Ongoing supplier monitoring (see Third-Party Risk Retainer) ### Client provides - A list of your suppliers and their contract details - Introductions to supplier contacts, and a named contact on your side **Fixed price for the scope listed; anything beyond is quoted before it starts.** **Related services:** [Third-Party Risk Retainer](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#third-party-risk-retainer) · [Technology & Security Due Diligence (M&A)](https://www.axiltech.com.au/services/governance-risk-compliance/technology-and-security-due-diligence-manda?hsLang=en-au) · [Security Policy & ISMS Documents](https://www.axiltech.com.au/services/governance-risk-compliance/policies-audit-evidence-and-awareness#security-policy-and-isms-documents) Most customers follow this with [Third-Party Risk Retainer](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#third-party-risk-retainer). [Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#book) ## Third-Party Risk Retainer Ongoing third-party risk management: your supplier risk register kept current, with supplier assessments carried out as you need them. **Who it's for:** Organisations with a steady flow of new or renewing suppliers. **Typical duration:** Monthly retainer, no lock-in **Price:** from A$500/month ex GST **Backed by:** CISSP · CCSP (see [what these accreditations mean](https://www.axiltech.com.au/accreditations?hsLang=en-au)) ### Includes - Register of your suppliers and their risk ratings, kept current each month - Monthly summary of changes and open risks - Access to an architect for supplier risk questions ### Size limits - Assessments are not included in the monthly fee; each is charged as an add-on - No lock-in: month to month, cancel any time with 30 days' notice ### Excludes - On-site audits - Contract and legal review - Technical testing of supplier products ### Client provides - A named contact; supplier list and contract renewal dates - Each supplier assessment: A$1,000 ex GST **Fixed price for the scope listed; anything beyond is quoted before it starts.** **Related services:** [Supply Chain & Third-Party Risk Assessment](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#supply-chain-and-third-party-risk-assessment) · [Virtual CISO (vCISO)](https://www.axiltech.com.au/services/ongoing-support/virtual-ciso-vciso?hsLang=en-au) · [PQC Vendor Assurance Retainer](https://www.axiltech.com.au/services/post-quantum/pqc-vendor-assurance-retainer?hsLang=en-au) Most customers follow this with [Supply Chain & Third-Party Risk Assessment](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#supply-chain-and-third-party-risk-assessment). [Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#book) ## Vendor Selection & RFP Advisory Independent technical advice when selecting a security or network vendor: requirements, RFP technical content, response evaluation and a recommendation. **Who it's for:** Organisations running a procurement for firewalls, SASE, Wi-Fi, SD-WAN or security services. **Typical duration:** 2–4 weeks **Price:** typically A$9,400–17,000 ex GST ### Includes - Technical requirements definition - RFP technical sections - Evaluation of up to 4 vendor responses - Recommendation report - Any vendor relationships we hold are disclosed before we start ### Size limits - One procurement ### Excludes - Commercial negotiation - Proof-of-concept builds (see SASE / ZTNA Design & Proof of Concept) ### Client provides - Existing requirements, the procurement timeline and a decision-maker contact **Fixed price for the scope listed; anything beyond is quoted before it starts.** **Related services:** [SASE / ZTNA Design & Proof of Concept](https://www.axiltech.com.au/services/cloud-microsoft-365/sase-and-zero-trust-network-access#sase-ztna-design-and-proof-of-concept) · [Network Design & Documentation](https://www.axiltech.com.au/services/network-security/network-design-sd-wan-and-documentation#network-design-and-documentation) · [SD-WAN & Multi-Site Design](https://www.axiltech.com.au/services/network-security/network-design-sd-wan-and-documentation#sd-wan-and-multi-site-design) Most customers follow this with [SASE / ZTNA Design & Proof of Concept](https://www.axiltech.com.au/services/cloud-microsoft-365/sase-and-zero-trust-network-access#sase-ztna-design-and-proof-of-concept). [Book a 15-minute call](https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#book) ## Book a 15-minute call Tell us what prompted the enquiry. We will confirm the scope and give you a fixed price before any work starts. Prefer email? [hello@axiltech.com.au](mailto:hello@axiltech.com.au) or [send an enquiry](https://www.axiltech.com.au/contact?hsLang=en-au). Want every service and its scope in one document? [Request the service catalogue](https://www.axiltech.com.au/catalogue?hsLang=en-au). ![Axil Tech](https://www.axiltech.com.au/hubfs/axil-tech-logo-reversed.svg "Axil Tech") - [Home](https://www.axiltech.com.au?hsLang=en-au) - [Start Here](https://www.axiltech.com.au/start-here?hsLang=en-au) - [Accreditations](https://www.axiltech.com.au/accreditations?hsLang=en-au) - [Contact](https://www.axiltech.com.au/contact?hsLang=en-au) - [Privacy policy](https://www.axiltech.com.au/privacy?hsLang=en-au) Axil Tech Pty Ltd · ABN 87 661 578 203 · Australia-wide · remote-first · +61 7 4700 1300 · hello@axiltech.com.au  --- © 2026. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "Service", "areaServed" : { "@type" : "Country", "name" : "Australia" }, "description" : "An assessment of the security risk your key suppliers and service providers bring, with a risk register and the contract and questionnaire controls to manage it.", "name" : "Supply Chain & Third-Party Risk Assessment", "provider" : { "@type" : "ProfessionalService", "areaServed" : { "@type" : "Country", "name" : "Australia" }, "email" : "hello@axiltech.com.au", "legalName" : "Axil Tech Pty Ltd", "name" : "Axil Tech", "taxID" : "87 661 578 203", "telephone" : "+61-7-4700-1300", "url" : "https://www.axiltech.com.au" }, "serviceType" : "Governance, Risk & Compliance", "url" : "https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#supply-chain-and-third-party-risk-assessment" } ``` ```json { "@context" : "https://schema.org", "@type" : "Service", "areaServed" : { "@type" : "Country", "name" : "Australia" }, "description" : "Ongoing third-party risk management: your supplier risk register kept current, with supplier assessments carried out as you need them.", "name" : "Third-Party Risk Retainer", "provider" : { "@type" : "ProfessionalService", "areaServed" : { "@type" : "Country", "name" : "Australia" }, "email" : "hello@axiltech.com.au", "legalName" : "Axil Tech Pty Ltd", "name" : "Axil Tech", "taxID" : "87 661 578 203", "telephone" : "+61-7-4700-1300", "url" : "https://www.axiltech.com.au" }, "serviceType" : "Governance, Risk & Compliance", "url" : "https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#third-party-risk-retainer" } ``` ```json { "@context" : "https://schema.org", "@type" : "Service", "areaServed" : { "@type" : "Country", "name" : "Australia" }, "description" : "Independent technical advice when selecting a security or network vendor: requirements, RFP technical content, response evaluation and a recommendation.", "name" : "Vendor Selection & RFP Advisory", "provider" : { "@type" : "ProfessionalService", "areaServed" : { "@type" : "Country", "name" : "Australia" }, "email" : "hello@axiltech.com.au", "legalName" : "Axil Tech Pty Ltd", "name" : "Axil Tech", "taxID" : "87 661 578 203", "telephone" : "+61-7-4700-1300", "url" : "https://www.axiltech.com.au" }, "serviceType" : "Governance, Risk & Compliance", "url" : "https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk#vendor-selection-and-rfp-advisory" } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://www.axiltech.com.au/", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://www.axiltech.com.au/start-here", "name" : "Services", "position" : 2 }, { "@type" : "ListItem", "item" : "https://www.axiltech.com.au/services/governance-risk-compliance", "name" : "Governance, Risk & Compliance", "position" : 3 }, { "@type" : "ListItem", "item" : "https://www.axiltech.com.au/services/governance-risk-compliance/supplier-and-vendor-risk", "name" : "Supplier & Vendor Risk", "position" : 4 } ] } ```