Enterprise Event Tech Security Checklist
The questions your security team will ask about any event platform. Written so you can hand it to them.
When an events team chooses a platform, the review that decides it usually happens in another department. This checklist is for that review.
It is written for IT, information security and risk reviewers, and it is vendor-neutral. It names no product, including ours. Every question is one a security reviewer would ask of any corporate event platform, and each section says what a weak answer looks like.
Eight sections
- Certifications and independent assurance
- Hosting, data residency and encryption
- Identity and access: single sign-on, multi-factor, roles and permissions
- Data retention and what happens at the end of a contract
- Personal data: guest data, dietary and accessibility information, subprocessors
- Integrations, exports and where the data goes
- Audit trail: who did what, and whether you can see it yourself
- Incident response, resilience and continuity
Plus a red-flags page and a one-page scoring summary.
Who it is for. Heads of Events and events managers at banks and law firms who want to walk into a vendor review already knowing what will be asked. And the reviewers themselves.
Published by Eventogy. ISO 27001 certified and Cyber Essentials accredited. We are happy to answer every question in this checklist in writing.
