CTPRP Contract Management and Vendor Oversight 2

Question 1

Which key performance indicator (KPI) is most relevant to monitoring a vendor's operational risk in an outsourced IT service?

Accepted Answer

System uptime and availability percentage against contracted SLAs

Answer

System uptime and availability measured against SLA thresholds directly reflects operational risk and ensures the vendor is delivering the contractually agreed service levels.

Question 2

What is 'contract risk concentration' in third-party risk management?

Accepted Answer

Over-reliance on a single vendor for a critical service, increasing exposure if that vendor fails

Answer

Contract risk concentration occurs when an organization relies heavily on one vendor for a critical service, creating a single point of failure that can be catastrophic if the vendor experiences an outage or failure.

Question 3

During ongoing vendor oversight, a 'change management' provision in a contract is designed to:

Accepted Answer

Require the vendor to notify and obtain approval for significant changes to personnel, systems, or processes

Answer

Change management provisions require vendors to formally notify the organization and seek approval before making material changes that could affect service quality, security posture, or compliance.

Question 4

In vendor contract negotiations, an 'escrow arrangement' for software source code primarily protects the organization from:

Accepted Answer

The risk of losing access to critical software if the vendor goes out of business or is acquired

Answer

A source code escrow arrangement ensures that if a software vendor ceases operations or cannot support the product, the organization can access the source code to maintain or migrate the software.

Question 5

Which of the following is the BEST reason to include a 'benchmarking' clause in a long-term vendor contract?

Accepted Answer

To enable the organization to periodically compare vendor pricing and performance against market standards

Answer

A benchmarking clause allows the organization to periodically compare the vendor's pricing and service quality against market peers, ensuring ongoing value and competitiveness over the contract's life.

(CTPRP) Certified Third Party Risk Professional Practice Test

(CTPRP) Certified Third Party Risk Professional Practice Test

CTPRP Contract Management and Vendor Oversight 2