CTO Vendor Management & Procurement 4

Question 1

What is the primary risk of relying on a single-source vendor for a mission-critical technology component?

Accepted Answer

Reduced negotiating leverage and supply chain concentration risk creating potential single points of failure

Answer

Single-source dependency eliminates competitive leverage and creates operational vulnerability if the vendor experiences disruption, financial failure, or service degradation.

Question 2

A vendor proposes adding a usage-based pricing model to replace a flat annual license. Under what circumstances is this advantageous for the buyer?

Accepted Answer

When usage is variable, seasonal, or growth is uncertain, aligning cost to actual consumption

Answer

Usage-based pricing benefits organizations with variable or unpredictable demand by eliminating the cost of unused capacity.

Question 3

During a third-party security audit of a critical vendor, auditors identify multiple unpatched critical CVEs in production systems. What is the CTO's immediate priority?

Accepted Answer

Issue a formal remediation demand with a defined patch timeline and escalation path, and assess compensating controls

Answer

A formal remediation demand with timelines and compensating control assessment balances urgency with contractual process and operational continuity.

Question 4

What does 'right to audit' in a vendor contract specifically enable the purchasing organization to do?

Accepted Answer

Inspect the vendor's compliance with contractual obligations, security controls, and data handling practices

Answer

Right-to-audit clauses grant the buyer access to verify contractual compliance, security posture, and data governance practices, not financial oversight.

Question 5

When building a vendor scorecard, which combination of dimensions provides the most balanced view of vendor performance?

Accepted Answer

SLA attainment, innovation contribution, relationship quality, and financial stability

Answer

A balanced scorecard spanning performance, innovation, relationship, and financial health captures both current delivery and long-term partnership value.

(CTO) Certified Chief Technology Officer Practice Test

(CTO) Certified Chief Technology Officer Practice Test

CTO Vendor Management & Procurement 4