CTPRP Contract Management and Vendor Oversight 2

Question 1

Which key performance indicator (KPI) is most relevant to monitoring a vendor's operational risk in an outsourced IT service?

Accepted Answer

System uptime and availability percentage against contracted SLAs

Answer

Vendor employee satisfaction scores

Answer

Number of vendor sales representatives assigned to the account

Answer

Vendor's annual revenue growth rate

Question 2

What is 'contract risk concentration' in third-party risk management?

Accepted Answer

Over-reliance on a single vendor for a critical service, increasing exposure if that vendor fails

Answer

Having multiple contracts with the same legal counsel

Answer

Concentrating all contract negotiations in one quarter

Answer

Requiring all vendors to carry the same insurance policy

Question 3

During ongoing vendor oversight, a 'change management' provision in a contract is designed to:

Accepted Answer

Require the vendor to notify and obtain approval for significant changes to personnel, systems, or processes

Answer

Allow the vendor to change contract terms unilaterally during the contract period

Answer

Enable the organization to change payment terms without vendor consent

Answer

Mandate quarterly changes to the vendor's security protocols

Question 4

In vendor contract negotiations, an 'escrow arrangement' for software source code primarily protects the organization from:

Accepted Answer

The risk of losing access to critical software if the vendor goes out of business or is acquired

Answer

Intellectual property theft by the organization's employees

Answer

Regulatory fines for using unlicensed software

Answer

The vendor raising software licensing fees after contract signing

Question 5

Which of the following is the BEST reason to include a 'benchmarking' clause in a long-term vendor contract?

Accepted Answer

To enable the organization to periodically compare vendor pricing and performance against market standards

Answer

To allow the vendor to benchmark the organization's internal processes

Answer

To require the vendor to benchmark all employees annually

Answer

To establish a baseline for the vendor's marketing spend

Question 6

What is the primary risk management benefit of establishing a formal vendor offboarding process?

Accepted Answer

It ensures all access is revoked, data is returned or destroyed, and transition risks are managed in an orderly manner

Answer

It ensures the vendor receives a positive exit review from the organization

Answer

It allows the vendor to retain copies of all organizational data for their records

Answer

It simplifies the organization's accounts payable reconciliation

Question 7

In a third-party risk context, 'contract tiering' refers to:

Accepted Answer

Applying different levels of contractual requirements and oversight based on a vendor's risk classification

Answer

Categorizing contract types by their legal complexity

Answer

Requiring vendors to bid on contracts in multiple rounds

Answer

Tiering payment milestones throughout the contract period