Explain the Importance of Supply Chain Risk Management (SCRM) in Cybersecurity. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   How does SCRM integrate with the broader cybersecurity risk management program?

   • ASCRM is a separate process that operates independently from other risk management activities
   • BSCRM is a one-time activity performed during vendor onboarding
   • CSCRM is a component of the overall risk management program, sharing methodologies and reporting
   • DSCRM is only relevant to the procurement department and not to the cybersecurity team
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key benefit of communicating supply chain risks to stakeholders?

   • AIt guarantees that all risks will be eliminated
   • BIt helps stakeholders understand the potential impact on the organization
   • CIt ensures that only the cybersecurity team is responsible for risk management
   • DIt allows the organization to avoid regulatory compliance
   Reveal Solution Discussion Select an answer first
3. 28expert · hard

   A company is considering a vendor that has a strong security program but is located in a country with strict data protection laws. The vendor will process personal data of the company's customers. What is the most important consideration for the company?

   • AThe vendor's security program is the only factor that matters.
   • BThe vendor's location may affect the company's compliance with data protection regulations.
   • CThe vendor's security program is strong, so no additional measures are needed.
   • DThe company should avoid using any vendor in a different country.
   Reveal Solution Discussion Select an answer first