The risk assessment process should consider information security risk, including assessment of third-party controls related to security, privacy, confidentiality, and availability of shared data.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Information security:

— Pyrana Vendor Management Policy.pdf

assessment of third-party controls related to security, privacy, confidentiality and availability of data shared

— Pyrana Vendor Management Policy.pdf