The risk assessment process should consider due diligence factors, including distributed IT environments, legacy or longstanding suppliers, and the third party’s use of subcontractors.

The risk categories that should be considered during the risk assessment process includes

— Pyrana Vendor Management Policy.pdf

Due diligence:

— Pyrana Vendor Management Policy.pdf

distributed IT environments, legacy/ longstanding suppliers, and use of subcontractors by the third party

— Pyrana Vendor Management Policy.pdf