Vendor risk assessments should consider information security by evaluating third-party controls for security, privacy, confidentiality, and availability of shared data so that data protection risks are understood.

Information security:

— Pyrana Vendor Management Policy.pdf

assessment of third-party controls

— Pyrana Vendor Management Policy.pdf

related to security, privacy, confidentiality and availability

— Pyrana Vendor Management Policy.pdf

of data shared

— Pyrana Vendor Management Policy.pdf