# Control 2.7: Vendor and Third-Party Risk Management

## Expected Screenshots

| Filename | Portal | Navigation Path | What to Capture |
|----------|--------|-----------------|-----------------|
| `01-ppac-connectors-list.png` | PPAC | Data → Connectors | Available connectors |
| `02-ppac-connector-details.png` | PPAC | Connector → Details | Connector information |
| `03-ppac-analytics-connectors.png` | PPAC | Analytics → Power Automate | Connector usage analytics |
| `04-ppac-dlp-connectors.png` | PPAC | Policies → Data policies | Connector classification |
| `05-sharepoint-vendor-inventory.png` | SharePoint | Vendor risk register | Third-party vendor list |
| `06-sharepoint-vendor-assessment.png` | SharePoint | Vendor → Assessment | Risk assessment form |

## Verification Focus

- Third-party connectors are inventoried
- Vendor risk assessments are current
- DLP policies classify third-party connectors appropriately
- Connector usage is monitored
