Vendor Management and Procurement Processes CCISO Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which document is typically issued before an RFP to gather preliminary information about vendor capabilities and market options?

   • AMemorandum of Understanding (MOU)
   • BRequest for Information (RFI)
   • CStatement of Work (SOW)
   • DNon-Disclosure Agreement (NDA)
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When assessing vendor security risk, which activity is most appropriate for the organization to perform before signing a contract?

   • ARelying solely on the vendor's marketing materials
   • BConducting a security assessment of the vendor's controls and practices
   • CWaiting until after the contract is signed to review the vendor's security posture
   • DAssuming the vendor's security is adequate because they are a large company
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has decided to terminate its contract with a managed security services provider (MSSP) due to poor performance. The CISO must ensure a smooth transition to a new MSSP. What should the CISO do first?

   • AReview the exit clause in the contract and develop a transition plan
   • BImmediately cut off the vendor's access to all systems
   • CIgnore the exit clause and negotiate informally
   • DAsk the new MSSP to start monitoring without a formal handover
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary goal of a vendor transition plan during termination?

   • ATo immediately cut off all access to the vendor's systems
   • BTo maximize the cost of the transition for the outgoing vendor
   • CTo minimize disruption to business operations while moving to a new vendor or internal capability
   • DTo avoid any communication with the vendor during the exit process
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which practice is most effective for maintaining a collaborative vendor relationship and ensuring continuous improvement?

   • ALimiting communication to contract renewal periods
   • BHolding regular business reviews to discuss performance and improvement opportunities
   • COnly contacting the vendor when problems occur
   • DSharing all internal strategic plans with the vendor without restriction
   Reveal Solution Discussion Select an answer first