CTPRP Contract Management and Vendor Oversight 3

Question 1

Which regulatory guideline most directly influences how U.S. financial institutions structure their vendor contracts and oversight programs?

Accepted Answer

OCC Bulletin 2013-29 on Third-Party Relationships

Answer

SEC Regulation S-P

Answer

FINRA Rule 4511

Answer

FDIC Deposit Insurance Act

Question 2

A 'termination for convenience' clause in a vendor contract is best described as:

Accepted Answer

A clause permitting the organization to terminate the contract without cause, typically with advance notice

Answer

A clause allowing the vendor to exit the contract if the work becomes inconvenient

Answer

A clause that automatically terminates the contract if the organization experiences financial difficulty

Answer

A clause requiring a court ruling before contract termination is permitted

Question 3

When evaluating vendor contracts for concentration risk, which scenario represents the HIGHEST concern?

Accepted Answer

Relying on a single cloud provider for 90% of core banking infrastructure with no viable alternative

Answer

Using two different vendors for non-critical marketing services

Answer

Having multiple contracts with different legal jurisdictions

Answer

Engaging three vendors for redundant janitorial services

Question 4

Which element of a vendor contract specifically addresses the legal responsibilities and obligations each party assumes if a third party suffers harm due to the vendor's actions?

Accepted Answer

Indemnification clause

Answer

Confidentiality provisions

Answer

Non-solicitation clause

Answer

Governing law clause

Question 5

A vendor's failure to notify the organization of a significant data breach within the contractually required timeframe is BEST addressed through which contract provision?

Accepted Answer

Incident notification and response obligations

Answer

Right-to-audit clause

Answer

Non-disclosure agreement

Answer

Limitation of liability clause

Question 6

In third-party risk management, what is the purpose of a 'step-in rights' clause?

Accepted Answer

It grants the organization the right to take over a vendor's operations to maintain service continuity during a crisis

Answer

It allows the vendor to step into the organization's operations if payments are delayed

Answer

It requires the vendor to step in and manage the organization's IT during transitions

Answer

It mandates that a third-party auditor steps in to review all contract disputes

Question 7

Which approach to vendor performance reporting is considered BEST practice in ongoing third-party oversight?

Accepted Answer

Using a combination of vendor-provided reports, independent audits, and automated monitoring for a balanced view

Answer

Relying solely on the vendor's self-reported metrics without independent verification

Answer

Conducting performance reviews only when issues are escalated by end users

Answer

Limiting performance reviews to the annual contract renewal period