Executive management must review identified risks together with mitigation strategies or risk acceptance decisions before the organization engages with vendors.

Review of identified risks

— Pyrana Vendor Management Policy.pdf

along with mitigation strategies or whether the risks are acceptable

— Pyrana Vendor Management Policy.pdf

should be performed by executive management prior to engaging with vendors

— Pyrana Vendor Management Policy.pdf