Vendor Assessment

5 minutes 5 Questions

Vendor assessment is the method of evaluating and selecting suppliers based on their ability to provide quality goods and services at competitive prices while adhering to operational and security requirements. This includes evaluating suppliers' past performance, financial stability, technical capa…

Test mode:

Exam (Timed)

Practice (With explanations)

Start practice test

Question 1

You are the lead of vendor assessment for your organization. A new vendor has been proposed to provide critical IT services. Which technique should be employed to ensure an accurate evaluation of the vendor?

Perform a thorough risk assessment Make the selection based on the lowest bidder Ask the vendor to provide references and rely solely on their feedback Extend a short-term contract and assess their performance later

Correct Answer: Perform a thorough risk assessment

A correct evaluation of the vendor should involve a thorough risk assessment to ensure the vendor is compliant and can provide the proper security and services. Other options like selecting based on the lowest price, references, or marketing material do not guarantee accurate vendor evaluation.

Question 2

Your organization is in the process of acquiring another company that relies on a critical vendor. Your team has been tasked with vendor assessment. What aspect should be prioritized to determine whether to continue working with them?

Evaluate the vendor's compliance with your organization's security standards Determine how many years the vendor has been in business Assess the vendor's future product roadmap Evaluate the vendor's clean energy initiatives

Correct Answer: Evaluate the vendor's compliance with your organization's security standards

The primary focus during the acquisition should be to ensure the vendor complies with your organization's security standards. While the other aspects may be relevant during the vendor assessment, compliance with security standards should be prioritized.

Question 3

Your organization is considering engaging a cloud service provider for a mission-critical application. What should be evaluated to ensure data security when your organization no longer has direct control over physical servers?

Vendor's geographical location Vendor's employee turnover rate Amount of power consumed by the vendor Data encryption methods used by the vendor

Correct Answer: Data encryption methods used by the vendor

One of the main concerns with cloud services is ensuring data security. Evaluating the data encryption methods used by the vendor will help assess their ability to protect your organization's data. Other factors mentioned may be relevant to the overall assessment but don't address data security directly.

🎓 Unlock Premium Access

CISSP + ALL Certifications

Vendor Assessment

Guide & Exam Tips: Vendor Assessment in Security of Supply Chain - CISSP concept

CISSP - Vendor Assessment Example Questions

Question 1

Question 2

Question 3

🎓 Unlock Premium Access