CSL Cybersecurity Contract Law & Vendor Management 2

Question 1

What is the legal significance of a 'breach notification' clause in a vendor contract?

Accepted Answer

It specifies the timeframe and method by which the vendor must notify the client of a security incident

Answer

It eliminates the vendor's liability for the breach

Answer

It grants the vendor immunity from regulatory fines

Answer

It transfers all notification obligations to the client

Question 2

What legal standard describes a vendor's obligation to implement reasonable security measures to protect client data under a contract?

Accepted Answer

Due diligence / duty of care

Answer

Safe harbor

Answer

Sovereign immunity

Answer

Subrogation

Question 3

Under what legal theory might a company successfully sue a vendor for failing to implement agreed-upon cybersecurity controls?

Accepted Answer

Breach of contract

Answer

Unjust enrichment

Answer

Tortious interference

Answer

Promissory estoppel

Question 4

Which of the following is typically addressed in a Data Processing Agreement (DPA) with vendors?

Accepted Answer

Processing purposes, security measures, and data subject rights obligations for personal data

Answer

The vendor's corporate tax obligations

Answer

The vendor's marketing rights to client data

Answer

Intellectual property ownership of vendor-developed tools

Question 5

What is 'indemnification' in the context of cybersecurity vendor contracts?

Accepted Answer

A contractual obligation for one party to compensate the other for specified losses or damages

Answer

A requirement to purchase cybersecurity insurance

Answer

A government-mandated security standard

Answer

A provision allowing contract termination after a breach

Question 6

What due diligence process should companies conduct before engaging a cybersecurity vendor?

Accepted Answer

Assess the vendor's security certifications, practices, financial stability, and past incident history

Answer

Review only the vendor's marketing materials

Answer

Rely solely on the vendor's self-attestation without independent verification

Answer

Check only whether the vendor carries cybersecurity insurance

Question 7

What legal mechanism allows a company to terminate a vendor contract if a material cybersecurity breach occurs?

Accepted Answer

Termination for cause clause

Answer

Automatic renewal clause

Answer

Limitation of liability clause

Answer

Arbitration clause