Risk assessments for third parties must be repeated on an annual basis so that gaps between third-party security controls and PYRANA.ai information security standards or regulatory requirements are identified over time.

be repeated an annual basis

— Pyrana Vendor Management Policy.pdf

to identify any gaps between the third-party security controls

— Pyrana Vendor Management Policy.pdf

and PYRANA.ai Information Security standards/regulatory requirements

— Pyrana Vendor Management Policy.pdf