Vendor and Supply Chain Management CDPSE Practice Questions (Page 7)

Questions 31–32

1. 31application · medium

   A company is considering a new vendor for email marketing services. The vendor will have access to customer email addresses and purchase history. During the vendor risk assessment, the company identifies that the vendor has had a recent data breach. What should the company do?

   • AAsk the vendor to sign a waiver releasing the company from liability in case of a future breach.
   • BReject the vendor immediately because any breach history makes them too risky.
   • CProceed with the vendor because the breach was not related to email marketing data.
   • DEvaluate the vendor's remediation actions and the impact of the breach on the vendor's ability to protect data.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is typically included in a data processing agreement?

   • AThe organization's internal meeting schedule
   • BThe vendor's marketing budget and advertising strategy
   • CThe vendor's employee salaries and benefits
   • DThe duration of the processing and the rights and obligations of the data controller
   Reveal Solution Discussion Select an answer first