CSCP Supply Chain Risk Management 5

Question 1

Which standard provides general principles and guidelines for enterprise risk management that can be applied to supply chains?

Accepted Answer

ISO 31000

Answer

ISO 31000 sets out principles and a framework for managing risk in any organization.

Question 2

A business continuity plan (BCP) is mainly intended to:

Accepted Answer

Keep critical operations running during and after a disruption

Answer

A BCP lays out how essential functions continue or are restored when a disruption happens.

Question 3

Which approach helps reduce the risk of counterfeit components entering the supply chain?

Accepted Answer

Sourcing from authorized distributors and using traceability

Answer

Authorized channels and traceability confirm the authenticity and origin of parts.

Question 4

Postponement reduces supply chain risk mainly by:

Accepted Answer

Delaying final product configuration until demand is better known

Answer

Postponement keeps products generic longer, which lowers the risk of building the wrong mix.

Question 5

Which scenario best illustrates a cybersecurity supply chain risk?

Accepted Answer

A vendor's compromised software update gives attackers network access

Answer

Attacks that enter through trusted vendor software or systems are a classic cyber supply chain risk.

Certified Supply Chain Professional CSCP Practice Practice Test