Executive management should perform a vendor risk assessment before engaging with vendors so that third-party risks are evaluated prior to establishing the relationship.

should be performed by executive management

— Pyrana Vendor Management Policy.pdf

prior to engaging with vendors

— Pyrana Vendor Management Policy.pdf

risk assessment process

— Pyrana Vendor Management Policy.pdf

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf