Vendor Management and Procurement Processes ACCISO Practice Questions (Page 4)

Questions 16–20

1. 16application · medium · select all that apply

   A company is procuring a new software platform that will process personal data of customers in multiple countries. The company's legal team has identified several compliance requirements. Select all the compliance considerations that should be addressed in the vendor contract.

   • AInclude a clause that the vendor is solely responsible for any data breach, regardless of cause.
   • BInclude data processing agreements that define the roles and responsibilities of each party.
   • CEnsure the contract includes provisions for international data transfers, if applicable.
   • DRequire the vendor to provide notification of any data breaches within a specified timeframe.
   • ERequire the vendor to comply with all applicable data protection laws in the jurisdictions where the company operates.
   Check answers Discussion Select an answer first
2. 17foundation · easy

   During a vendor risk assessment, which of the following would be considered a compliance risk?

   • AThe vendor's key personnel have recently left the company
   • BThe vendor's financial statements show declining profitability
   • CThe vendor does not adhere to industry-specific data protection regulations
   • DThe vendor's data center is located in a region prone to natural disasters
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A financial services firm is selecting a cloud-based identity management vendor. The vendor must support integration with the firm's existing on-premises Active Directory, meet strict data residency requirements for customer data, and provide a financially stable track record. The procurement team has narrowed candidates to three vendors that all meet the technical requirements. Which additional criterion should be weighted most heavily during final selection?

   • AThe vendor's headquarters is located in the same country as the firm.
   • BThe vendor has a strong record of compliance with financial industry regulations and a history of stable financial performance.
   • CThe vendor's marketing materials emphasize innovation and cutting-edge features.
   • DThe vendor offers the lowest upfront licensing cost among the three candidates.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In a vendor contract, what is the primary purpose of a Service Level Agreement (SLA)?

   • ATo outline the vendor's marketing and sales strategies
   • BTo describe the vendor's internal quality control processes
   • CTo define the performance expectations and remedies if they are not met
   • DTo list the vendor's employee names and contact information
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   When an organization is evaluating potential vendors for a critical IT service, which combination of factors is most essential to include in the vendor selection criteria?

   • ANumber of certifications, awards, and press releases
   • BGeographic proximity, office aesthetics, and employee count
   • CMarketing presence, brand recognition, and social media following
   • DQuality of service, cost, reliability, and alignment with organizational goals
   Reveal Solution Discussion Select an answer first