The vendor risk assessment process should consider data exposure risks from incorrectly classified or unidentified data that could be exposed to a third party so that unintended disclosure is prevented.

Data exposure

— Pyrana Vendor Management Policy.pdf

incorrectly classified data

— Pyrana Vendor Management Policy.pdf

unidentified data that could be exposed to the third-party

— Pyrana Vendor Management Policy.pdf