Guidance

Cyber Security Model Question Sets

Supplier Assurance Questionnaire (SAQ) and Flow Down Risk Assessment (RA) Question sets.

• From: Ministry of Defence
• Published: 10 March 2026

SAQ and Flow Down RA Question sets accurate on their publication date as part of the Ministry of Defence’s Cyber Security Model. Question sets are blank and not for population.

1. Supplier Assurance Questionnaire – Cyber Risk Profile Level 0 (PDF, 167 KB, 7 pages)
2. Supplier Assurance Questionnaire – Cyber Risk Profile Level 1 (PDF, 345 KB, 56 pages)
3. Supplier Assurance Questionnaire – Cyber Risk Profile Level 2 (PDF, 439 KB, 73 pages)
4. Supplier Assurance Questionnaire – Cyber Risk Profile Level 3 (PDF, 435 KB, 72 pages)
5. Flow Down Risk Assessment (PDF, 205 KB, 11 pages)

Details

Suppliers of the Ministry of Defence (including as a subcontractor) must use the Supplier Cyber Protection Service to complete a SAQ or Flow Down RA.

Published 10 March 2026