The vendor risk assessment process includes due diligence for distributed IT environments, legacy or longstanding suppliers, and third-party use of subcontractors so that supplier complexity risks are assessed.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Due diligence

— Pyrana Vendor Management Policy.pdf

distributed IT environments, legacy/ longstanding suppliers, and use of subcontractors by the third party

— Pyrana Vendor Management Policy.pdf