Contracts involving exchange of confidential data must require vendor confidentiality agreements and must identify the security policies and procedures that apply to the vendor.

Contracts that include exchange of confidential data must require confidentiality agreements to be executed by the vendor

— Pyrana Vendor Management Policy.pdf

shall identify applicable security policies and procedures

— Pyrana Vendor Management Policy.pdf

to which the vendor is subjected

— Pyrana Vendor Management Policy.pdf