Due Diligence – Regulation S-P Service Provider Review Package

$800.00

This Due Diligence – Regulation S-P Service Provider Review Package is a collection of supplemental forms, checklists, and questionnaires to help evaluate and monitor cybersecurity and incident response risks associated with service providers. These materials are designed to scale due diligence based on the nature and type of the service provider, the sensitivity of data involved, and the level of access to customer or firm information.

Included with Bronze, Silver, Gold, Platinum & Titanium Annual Compliance Program packages. Initially posted in June 2026.

Description

This Due Diligence – Regulation S-P Service Provider Review Package is a collection of supplemental forms, checklists, and questionnaires to help evaluate and monitor cybersecurity and incident response risks associated with service providers. These materials are designed to scale due diligence based on the nature and type of the service provider, the sensitivity of data involved, and the level of access to customer or firm information. This package includes:

  • Service Provider Due Diligence Glossary of Key Terms and Definitions, which is an internal guide providing plain-English definitions of key terms necessary to understand when completing the supplemental forms, checklists, and questionnaires.
  • Service Provider Cybersecurity Due Diligence – Risk Rating Guide and Scorecard, which is an internal guide to support consistent evaluation of service provider cybersecurity risk and to document service provider oversight and monitoring under Regulation S-P (17 CFR 248.30(a)(5)) and related recordkeeping expectations.
  • Tier 1 or Tier 2 Service Provider Cybersecurity & Incident Response Due Diligence Questionnaire, for lower risk vendors, as determined by the Scorecard. This questionnaire supports a risk-based approach to service provider oversight and helps ensure that service providers maintain appropriate safeguards consistent with the firm’s regulatory obligations and identity theft prevention objectives.
  • Tier 3 or Tier 4 Service Provider Cybersecurity & Incident Response Due Diligence Questionnaire, for higher risk or critical service providers. This questionnaire gathers detailed information regarding security governance, incident detection and response capabilities, notification practices, and use of subcontractors.
  • Service Provider Due Diligence Summary Memo Sample Template, which is a template for documenting initial and ongoing oversight (due diligence and monitoring) of service providers that have access to the firm’s customer information, supporting Regulation S-P safeguards and service provider oversight requirements.
  • Cybersecurity – Best Practices Checklist, which is a checklist for cybersecurity and avoidance of identity theft.

These forms, checklists, and questionnaires are included with Bronze, Silver, Gold, Platinum & Titanium Annual Compliance Program packages. Initially posted in June 2026.

Disclosures

Sample Documents Disclosure

These sample documents are merely examples for general reference and educational purposes. RIA Compliance Consultants, Inc. is providing these sample documents to the purchaser on an “as is” basis with no warranty or guaranty whatsoever.

These sample documents should be considered a starting point, and purchaser should not treat these sample documents as final documents ready for use. The sample documents have not been customized to the purchaser’s business model, the specific investment advisory rules applicable to the purchaser’s investment adviser or the written supervisory procedures and code of ethics of purchaser’s investment adviser.

These sample documents may not be applicable or appropriate for every investment adviser. The purchaser should not consider sample documents purchased from our online store as an exhaustive, comprehensive or definitive list of the items necessary to meet the purchaser’s obligations under the applicable investment adviser laws and rules.

These sample documents are not intended to detect or prevent fraud, selling away, Ponzi schemes, undisclosed outside business activities, inaccurate or false fee calculations, theft, misappropriation or unlawful conversion of client funds.

Due to changes of investment adviser laws and rules, these sample documents may become outdated and need to be updated or discontinued. RIA Compliance Consultants, Inc. will not be providing any subsequent updates of these sample documents to the purchaser. Likewise, RIA Compliance Consultants, Inc. will not be monitoring and reporting to the purchaser any issues related to the use of these sample documents.

Since these sample documents may not reflect the specific investment advisory requirements of the purchaser’s securities regulator, the purchaser should check with the securities regulator(s) with jurisdiction over its investment adviser or review any applicable rules before using these documents.

These sample documents are not a substitute for retaining a compliance professional to advise and assist the purchaser regarding its investment adviser’s compliance program. Unless otherwise agreed to in writing, the purchaser understands that the purchaser has not engaged RIA Compliance Consultants, Inc. in a consulting relationship by merely purchasing or utilizing sample forms. Additionally, the purchaser understand that unless otherwise agreed to in writing, RIA Compliance Consultants, Inc. is not responsible for customizing these sample documents, updating these sample documents, preparing the purchaser’s written supervisory procedures or code of ethics, or notifying the purchaser of changes to the investment adviser laws and rules.

Purchaser is not authorized to re-sell these sample documents nor license the use of these sample documents to a third-party.

Not Information Security Experts

RIA Compliance Consultants is not an expert in information security. Our employees are not trained or certified in information security. We do not provide information security risk assessments or audits of information security plans. RIA Compliance Consultants offers the following practices and techniques for the reader to start a discussion with his or her IT & information security staff or consultants. These practices are general in nature and may not be applicable to particular investment adviser firm’s business model or information systems. Moreover, these practices may have become dated or might be considered ineffective by the investment adviser’s IT and information security staff or consultants. As a result, this document and these practices are provided to you on “as is” basis with no warranty.

These practices have not been customized to your investment adviser’s business model, information systems, the specific investment advisory rules of your investment adviser’s securities regulator or your investment adviser’s written supervisory procedures and code of ethics. These practices may not be applicable or appropriate for your investment adviser. Likewise, there may be risks associated with these practices. You should not consider these practices as an exhaustive, comprehensive or definitive list of the items necessary to meet your investment adviser’s obligations to protect confidential client information under the applicable investment adviser laws and rules.

Since these sample documents may not reflect the specific investment advisory requirements of your securities regulator, please check with the securities regulator(s) with jurisdiction over your investment adviser before using these sample documents.Since technology and the strategies/tactics of fraudsters is likely to evolve and change, it’s likely that these practices may become less effective or fail to address certain risks over time. As a result, RIA Compliance Consultants recommends that the investment adviser firm periodically review the latest developments in cybersecurity and identity theft fraud and update its information security plan and practices.

These practices are not a substitute for retaining an information security consultant to advise and assist you regarding your investment adviser’s information security plan and practices. (RIA Compliance Consultants does not consider itself an information security consultant and does not offer risk assessments of information security plans and practices.) Additionally, you understand that unless otherwise agreed to in writing, RIA Compliance Consultants, Inc. is not responsible for customizing these practices, preparing your investment adviser’s written supervisory procedures or code of ethics, or notifying you of changes to the investment advisor laws and rules.

Delivery

Before this product can be purchased, the purchaser will be directed to electronically sign a terms and use agreement.  After signing that agreement, the purchaser will be redirected to the purchaser’s shopping cart to complete the purchase transaction.

If this product involves the purchase of a sample document on a la cart basis (not part of an annual compliance program engagement), the purchaser will have three ways to access this sample document: 1) Following payment, the purchaser will be redirected to a thank you page with a button to download the sample document; 2) The purchaser will receive an invoice email with a link to download the sample document; 3) If the purchaser has an account or elects to create one at the time of checkout, this sample document can be accessed from the “Downloads” section of purchaser’s My Account page. The purchaser will have 90 days to download sample document, which is limited to 3 downloads during this period.

If the individual intending to make a purchase is affiliated with a firm which has an active engagement with RIA Compliance Consultants for an annual compliance program (“ACP”), certain sample forms are available as part of ACP depending upon the package and do not need to be purchased separately.  Please check the description of the sample form as to whether such form is included in your ACP package.  If a sample form is included as part of your firm’s current ACP package and your firm (via the individual making payments in our system) has designated you as a team member in our Knowledge Base, please log into our Knowledge Base at https://www.ria-compliance-consultants.com/my-account/ to download such sample form.  For detailed instructions on how to access the KnowledgeBase, please refer to the following webpage: KnowledgeBase Instructions

If you experience any issues when making the purchase, please email [email protected] .

ACP packages

To the extent that your investment adviser firm currently has an active Annual Compliance Program (“ACP”) engagement with RIA Compliance Consultants, Inc., this sample document may be available as part of that engagement depending upon your firm’s ACP package (e.g., Bronze, Silver, Gold, Platinum and Titanium). Please refer to the “Description” tab within the product to determine whether the sample document is included as part of your firm’s ACP package. If included and your firm (via the individual making payments in our system) has designated you as a team member in our Knowledge Base, please log into our Knowledge Base to download the sample document. (For detailed instructions on how to access the Knowledge Base, please refer to the following webpage: Knowledge Base Instructions.) If not included in your ACP package, you can make an a la carte purchase of the sample document through this product in our online store.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

You may also like…