Contracts involving exchange of confidential data must require vendor confidentiality agreements and must identify the security policies and procedures applicable to the vendor so that confidentiality obligations are formally established.

Contracts that include exchange of confidential data must require confidentiality agreements to be executed by the vendor

— Pyrana Vendor Management Policy.pdf

shall identify applicable security policies and procedures

— Pyrana Vendor Management Policy.pdf

to which the vendor is subjected

— Pyrana Vendor Management Policy.pdf