Which vendor selection criterion is primarily used to assess a vendor's financial stability and long-term viability?

Vendor's compliance with ISO 27001 certification

Vendor's number of active patents

Vendor's credit rating and audited financial statements

Vendor's customer satisfaction survey scores

A company has a long-term contract with a managed security services provider (MSSP). The MSSP has consistently met its SLAs, but the company's security needs have evolved to include new compliance requirements. The CISO wants to maintain a productive relationship while adapting to the new requirements. Which action should the CISO take?

Wait until the next annual renewal to discuss the new requirements

Issue a formal notice of breach because the MSSP did not anticipate the new requirements

Schedule a strategic review meeting with the MSSP to discuss the new requirements and jointly update the service scope

Immediately terminate the contract and seek a new vendor

A financial institution is selecting a vendor for a new fraud detection system. Two vendors meet the technical requirements. Vendor A has a superior security posture but is financially unstable. Vendor B has adequate security but is financially strong. The CISO must balance security and financial risk. Which vendor should the CISO recommend?

Vendor A, because superior security is the most important factor

Either vendor, because both meet the technical requirements

Vendor B, because financial stability is critical for long-term service continuity

Vendor A, but require a parent company guarantee

In a typical procurement process, which step immediately follows the development and approval of a purchase requisition?

Solicitation of vendor bids or proposals

What is a key objective of ongoing vendor relationship management?

Transferring all responsibility for security to the vendor

Reducing the need for vendor performance monitoring

Ensuring the vendor complies with contractual obligations and organizational policies

EC-CouncilCertified Chief Information Security Officer

Domain 5Objective 6

Vendor Management and Procurement Processes CCISO Practice Questions (Page 5)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~21% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~13–21 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

Questions 21–25

21foundation · easy
Which vendor selection criterion is primarily used to assess a vendor's financial stability and long-term viability?
Select an answer first
22application · medium
A company has a long-term contract with a managed security services provider (MSSP). The MSSP has consistently met its SLAs, but the company's security needs have evolved to include new compliance requirements. The CISO wants to maintain a productive relationship while adapting to the new requirements. Which action should the CISO take?
Select an answer first
23expert · hard
A financial institution is selecting a vendor for a new fraud detection system. Two vendors meet the technical requirements. Vendor A has a superior security posture but is financially unstable. Vendor B has adequate security but is financially strong. The CISO must balance security and financial risk. Which vendor should the CISO recommend?
Select an answer first
24foundation · easy
In a typical procurement process, which step immediately follows the development and approval of a purchase requisition?
Select an answer first
25foundation · easy
What is a key objective of ongoing vendor relationship management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Vendor Management and Procurement Processes CCISO Practice Questions (Page 5)

Questions 21–25

Which vendor selection criterion is primarily used to assess a vendor's financial stability and long-term viability?

In a typical procurement process, which step immediately follows the development and approval of a purchase requisition?

What is a key objective of ongoing vendor relationship management?

Keep studying — Strategic Planning, Finance, Procurement, and Vendor Management