CCISO Vendor Management 5

Question 1

A CISO is developing a vendor exit strategy. Which element is MOST critical to include to protect the organization's sensitive information?

Accepted Answer

Data destruction or certified return procedures with proof of completion

Answer

A vendor exit strategy must include certified data destruction or return processes with documented proof to ensure sensitive information is not retained by the departing vendor.

Question 2

Which procurement practice BEST reduces the risk of counterfeit or tampered hardware components entering the organization's supply chain?

Accepted Answer

Sourcing hardware from authorized resellers and implementing integrity verification upon receipt

Answer

Procuring from authorized resellers and verifying hardware integrity upon receipt reduces the risk of counterfeit or supply chain-compromised components.

Question 3

Under the NIST Cybersecurity Framework, supply chain risk management (C-SCRM) is PRIMARILY associated with which function?

Accepted Answer

Identify

Answer

NIST CSF places supply chain risk management under the Identify function, as it involves understanding the risk landscape of suppliers and partners.

Question 4

A CISO requires that all vendors complete a security questionnaire before contract award. This activity BEST represents which phase of vendor lifecycle management?

Accepted Answer

Vendor onboarding and due diligence

Answer

Completing security questionnaires prior to contract award is a due diligence activity performed during the vendor onboarding phase.

Question 5

Which of the following BEST describes the purpose of a vendor scorecard in a third-party risk management program?

Accepted Answer

To provide a structured, measurable assessment of vendor performance across security and operational criteria

Answer

A vendor scorecard provides a structured framework to objectively measure and compare vendor performance against defined security, operational, and compliance criteria.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Vendor Management 5