Vendor Management

• Vendor Selection Criteria: Evaluate data security track records and compliance.
• Security Standards: Enforce high-level security requirements in contracts.
• Contracts and Agreements: Restrict vendor usage of data to legitimate operational requirements.