Vendor Management and Procurement Processes ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is evaluating a vendor that will process sensitive customer data. The vendor is located in a country with different data protection laws. The company's legal team has identified potential compliance issues. What is the MOST appropriate action?

   • AAsk the vendor to sign a contract that states they will comply with the company's local laws
   • BProceed with the vendor and rely on the company's own compliance team to monitor
   • CConduct a comprehensive risk assessment that includes legal review, data transfer mechanisms, and the vendor's security controls
   • DReject the vendor immediately because of the different data protection laws
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is planning to terminate a vendor that provides critical infrastructure services. The vendor has been underperforming, but the company's internal team does not have the capacity to take over the services immediately. The contract has a 60-day notice period. What is the best approach to manage the termination?

   • AExtend the contract indefinitely until the internal team is ready.
   • BContinue with the vendor but reduce its scope to minimize risk.
   • CTerminate the contract immediately and rely on the internal team to manage the services.
   • DProvide notice of termination and simultaneously begin a transition plan that includes hiring or contracting a replacement vendor before the 60-day period ends.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a strategic partnership with a key technology vendor. The vendor's performance has been excellent, but the company's procurement team is planning to renegotiate the contract. What is the BEST way to approach the renegotiation to maintain a strong relationship?

   • AKeep the negotiation details confidential and only discuss pricing
   • BThreaten to switch to a competitor if the vendor does not lower prices
   • CPresent a list of demands and require the vendor to accept them
   • DShare the company's future business goals with the vendor and explore how the vendor can support them
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is negotiating a contract with a managed security services provider. The company wants to ensure that the provider's performance is measurable and that there are consequences for failing to meet expectations. Which two elements should be included in the contract?

   • AA non-disclosure agreement (NDA) and a list of the provider's other clients
   • BA detailed project timeline and a communication plan
   • CService level agreements (SLAs) with specific metrics and a penalty clause for non-compliance
   • DA clause that allows either party to terminate the contract with 30 days' notice
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is negotiating a contract with a vendor for a critical service. The vendor is insisting on a clause that limits their liability to the amount paid for the service. The company's legal team is concerned about this limitation. What is the BEST approach?

   • AReject the contract entirely because of the liability clause
   • BAccept the clause because it is standard in the industry
   • CAsk the vendor to increase the liability cap to the total contract value
   • DNegotiate to exclude liability for data breaches or gross negligence from the limitation clause
   Reveal Solution Discussion Select an answer first