The vendor risk assessment process includes information security review of third-party controls for security, privacy, confidentiality, and availability of shared data so that data protection risks are identified.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Information security

— Pyrana Vendor Management Policy.pdf

assessment of third-party controls related to security, privacy, confidentiality and availability of data shared

— Pyrana Vendor Management Policy.pdf