The risk assessment process should consider data exposure risk, including incorrectly classified data and unidentified data that could be exposed to the third party.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Data exposure:

— Pyrana Vendor Management Policy.pdf

incorrectly classified data and unidentified data that could be exposed to the third-party

— Pyrana Vendor Management Policy.pdf