Information security is a required risk category in vendor risk assessments and includes assessing third-party controls for security, privacy, confidentiality, and availability of shared data.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Information security:

— Pyrana Vendor Management Policy.pdf

assessment of third-party controls related to security, privacy, confidentiality and availability of data shared

— Pyrana Vendor Management Policy.pdf