Remove Business Recovery Remove Outsourcing Remove Retail
article thumbnail

Tips for Managing Third-Party Risk in Health Care

Reciprocity

The questionnaire should include questions about the vendor’s data security practices, business recovery plans, and disaster recovery plans. Does the vendor outsource any IT services to fourth parties that can increase risk exposure? Does the vendor perform penetration testing and vulnerability scans?