Pretty much in the same way we have compliance packages, we thought about sharing some of the VAs we have been using. We have uploaded them on the VA documentation: Guide: Vendor Assesments - Google Docs
The first one is a small GDPR set of questions i used some time ago when the VA was still on beta.
regards