The vendor risk assessment process should consider information security controls related to security, privacy, confidentiality, and availability of shared data so that third-party data protection risks are evaluated.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Information security

— Pyrana Vendor Management Policy.pdf

assessment of third-party controls related to security, privacy, confidentiality and availability of data shared

— Pyrana Vendor Management Policy.pdf