The risk assessment process should consider monitoring gaps, including periodic assessments, ongoing monitoring, incident notification, offboarding, adherence, and the appropriateness of service level agreements.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Monitoring gaps:

— Pyrana Vendor Management Policy.pdf

periodic assessments, ongoing monitoring, incident notification, offboarding, adherence, and appropriateness of SLAs

— Pyrana Vendor Management Policy.pdf