Vendor Management and Procurement Processes ACCISO Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a critical software vendor that has been providing excellent service for years. Recently, the vendor has started missing minor deliverables and has been slow to respond to support tickets. The company's contract does not have a formal governance structure. What is the best approach to address this?

   • ASchedule a meeting with the vendor to discuss the issues, review performance data, and jointly develop an improvement plan.
   • BStart a competitive bidding process to replace the vendor.
   • CImmediately issue a formal breach notice and threaten to terminate the contract.
   • DReduce the vendor's scope of work to minimize the impact of their poor performance.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A software development firm has a long-term relationship with a cloud infrastructure vendor. The firm's usage has grown significantly, and it is considering renegotiating the contract. What is the best approach to maintain a mutually beneficial relationship during renegotiation?

   • APresent the vendor with a take-it-or-leave-it offer based on competitive quotes from other vendors.
   • BAvoid discussing future plans to prevent the vendor from raising prices.
   • CAsk the vendor to match the lowest price offered by any competitor without any other changes.
   • DShare the firm's projected growth and future needs with the vendor, and work together to structure a contract that supports both parties' goals.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A multinational corporation is procuring a new HR management system that will store employee data for workers in the European Union. The vendor is based in the United States and plans to process data in its U.S. data centers. What must the corporation ensure to comply with GDPR requirements?

   • AThe corporation stores all employee data in the EU and does not transfer any data to the U.S.
   • BThe vendor's U.S. headquarters is certified under the EU-U.S. Data Privacy Framework.
   • CThe corporation obtains consent from every employee whose data will be transferred.
   • DThe contract includes appropriate safeguards for international data transfers, such as standard contractual clauses or an adequacy decision.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is terminating a contract with a vendor that processed personal data. The company is in the EU and must comply with GDPR. What is the MOST important requirement to include in the termination process?

   • AEnsure that the vendor returns or securely deletes all personal data and provides a certificate of deletion
   • BAsk the vendor to transfer the data to the company's new vendor
   • CRequest a final invoice and settle all outstanding payments
   • DSchedule a meeting with the vendor to discuss the termination
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A government agency is procuring a new IT service. The agency must ensure that the vendor complies with federal security standards. What is the MOST appropriate way to assess the vendor's compliance during the procurement process?

   • ARequire the vendor to provide evidence of compliance, such as a FedRAMP authorization or SOC 2 report
   • BAsk the vendor to provide a list of its other government clients
   • CWait until after the contract is signed to conduct a security audit
   • DRely on the vendor's self-assessment questionnaire
   Reveal Solution Discussion Select an answer first