Vendor Management Policy

Purpose

The intent of this policy is to ensure that Third-Party Vendors which Uncanny Software engages with undergo review and oversight to mitigate dependency risks to the business.

Scope

This policy applies to all engagements with third parties entities which Uncanny Software exchanges Sensitive, Confidential, or Private data.

Policy

Third-Party Vendor Risk Assessment

• Information Risk Assessment - Assess the information risk (confidentiality, integrity, availability, and privacy) associated with the service outsourced by interviewing key Uncanny Software business owners and internal stakeholders;

Addressing Violations or lack of requirements

Violations

Definitions

References

Related Documents

• Data Classification Standard

Revision History

• Document history via Github