The vendor risk assessment process includes monitoring gaps such as periodic assessments, ongoing monitoring, incident notification, offboarding, adherence, and SLA appropriateness so that oversight weaknesses are identified.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Monitoring gaps

— Pyrana Vendor Management Policy.pdf

periodic assessments, ongoing monitoring, incident notification, offboarding, adherence, and appropriateness of SLAs

— Pyrana Vendor Management Policy.pdf