CTPRP Contract Management and Vendor Oversight

Question 1

Which contract provision specifically protects an organization by granting it the right to examine a vendor's internal controls, processes, and records?

Accepted Answer

Right-to-audit clause

Answer

Indemnification clause

Answer

Limitation of liability clause

Answer

Force majeure clause

Question 2

What is the primary purpose of including Service Level Agreements (SLAs) in a vendor contract?

Accepted Answer

To establish measurable performance standards and remedies for non-compliance

Answer

To define the payment schedule for services rendered

Answer

To outline the vendor's marketing obligations

Answer

To specify the vendor's employee compensation structure

Question 3

When a vendor intends to use a subcontractor to fulfill part of a contract, the organization's risk management best practice is to:

Accepted Answer

Require that the same contractual obligations and risk controls flow down to subcontractors

Answer

Prohibit all use of subcontractors without exception

Answer

Allow the vendor to manage subcontractors without organizational oversight

Answer

Renegotiate the entire contract before any subcontracting begins

Question 4

Which contract element addresses what happens to an organization's data and assets when the vendor relationship is terminated?

Accepted Answer

Data return and destruction clauses

Answer

Indemnification provisions

Answer

Governing law provisions

Answer

Intellectual property assignment clauses

Question 5

A vendor contract's 'limitation of liability' clause is most important for an organization's risk management because it:

Accepted Answer

Caps the amount of financial compensation the organization can recover from the vendor

Answer

Increases the financial exposure the vendor accepts for all damages

Answer

Eliminates the need for cyber insurance coverage

Answer

Removes the organization's obligation to notify regulators of a breach

Question 6

In third-party risk management, what does a 'business continuity' contract requirement typically mandate?

Accepted Answer

The vendor must maintain and test a business continuity plan (BCP) to ensure service availability during disruptions

Answer

The vendor must obtain business interruption insurance only

Answer

The vendor must relocate operations to the organization's facility during a disaster

Answer

The vendor must provide daily status reports regardless of disruptions

Question 7

Which of the following best describes a 'most favored nation' (MFN) clause in a vendor contract?

Accepted Answer

A clause guaranteeing the organization receives pricing no worse than the vendor's best offered price to comparable customers

Answer

A clause restricting the vendor from serving competitors in other countries

Answer

A clause requiring the vendor to prioritize the organization's orders above all others

Answer

A clause allowing the organization to exit the contract if a competitor receives better terms