Contracts involving exchange of confidential data must require vendor confidentiality agreements and identify the security policies and procedures applicable to the vendor so that confidentiality obligations are formally imposed.

Contracts that include exchange of confidential data

— Pyrana Vendor Management Policy.pdf

must require confidentiality agreements to be executed by the vendor

— Pyrana Vendor Management Policy.pdf

shall identify applicable security policies and procedures

— Pyrana Vendor Management Policy.pdf

to which the vendor is subjected

— Pyrana Vendor Management Policy.pdf