CTO Vendor Management & Procurement 3

Question 1

In a competitive RFP process for a $5M enterprise software platform, a vendor submits a proposal that is technically superior but 40% over budget. What is the best CTO response?

Accepted Answer

Engage the vendor in best-and-final-offer negotiations while evaluating TCO against alternatives

Answer

BAFO negotiations allow the CTO to understand whether the gap can close while a TCO comparison may reveal the premium is justified over the contract lifecycle.

Question 2

What is the key difference between a Statement of Work (SOW) and a Service Level Agreement (SLA)?

Accepted Answer

An SOW defines what will be delivered and how, while an SLA defines measurable performance standards for ongoing services

Answer

SOWs define project scope and deliverables for discrete engagements; SLAs define ongoing performance metrics, remedies, and measurement periods.

Question 3

Which procurement strategy is most appropriate when purchasing commodity hardware at scale to minimize cost?

Accepted Answer

Competitive bidding with multiple qualified vendors and volume bundling

Answer

Competitive bidding for commodity hardware leverages market competition and volume bundling to achieve optimal pricing without sacrificing supply diversity.

Question 4

A vendor requests access to production customer data for debugging purposes. What governance control should the CTO enforce?

Accepted Answer

Require a signed data processing agreement, least-privilege access, audit logging, and time-limited credentials

Answer

Least-privilege, time-limited access with audit logging and a DPA satisfies both operational needs and data protection obligations.

Question 5

What is vendor tiering and why is it a critical component of a mature vendor management program?

Accepted Answer

Categorizing vendors by criticality, spend, and risk to allocate oversight resources proportionally

Answer

Vendor tiering ensures governance resources (audits, reviews, escalation paths) are concentrated on the highest-risk and highest-impact relationships.

(CTO) Certified Chief Technology Officer Practice Test

(CTO) Certified Chief Technology Officer Practice Test

CTO Vendor Management & Procurement 3