The vendor risk assessment process should consider monitoring gaps, including periodic assessments, ongoing monitoring, incident notification, offboarding, adherence, and SLA appropriateness, so that oversight weaknesses are identified.

Monitoring gaps

— Pyrana Vendor Management Policy.pdf

periodic assessments, ongoing monitoring, incident notification, offboarding, adherence, and appropriateness of SLAs

— Pyrana Vendor Management Policy.pdf

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf