CTPRP Contract Management and Vendor Oversight 4

Question 1

A vendor's contract is up for renewal, but the vendor has repeatedly missed SLA targets. What is the MOST appropriate first action before renegotiating terms?

Accepted Answer

Conduct a formal performance review and document all SLA breaches

Answer

Documenting SLA breaches through a formal performance review creates an evidence-based foundation for renegotiation or termination decisions.

Question 2

Which contract clause specifically grants the organization the legal right to inspect a vendor's operational processes, financial records, and security controls?

Accepted Answer

Right-to-audit clause

Answer

A right-to-audit clause explicitly authorizes the contracting organization to examine vendor operations, finances, and controls to verify compliance.

Question 3

A third-party vendor discloses that it has subcontracted a critical function to a fourth party without prior approval. What risk management concern does this PRIMARILY raise?

Accepted Answer

Nth-party risk due to lack of visibility and control

Answer

Unapproved subcontracting introduces nth-party risk because the organization has no direct contractual relationship or oversight over the fourth party.

Question 4

During contract negotiations, a vendor insists on a mutual indemnification clause. What does mutual indemnification mean for the contracting organization?

Accepted Answer

Both parties agree to hold each other harmless for their respective breaches or negligence

Answer

Mutual indemnification means each party agrees to defend and compensate the other for losses arising from its own negligence or breach, creating reciprocal protection.

Question 5

An organization's vendor management policy requires quarterly business reviews (QBRs) for Tier 1 vendors. What is the PRIMARY purpose of a QBR?

Accepted Answer

To assess vendor performance, discuss strategic alignment, and address emerging risks

Answer

QBRs provide a structured forum to review performance against SLAs, align on strategic objectives, and proactively identify and mitigate emerging risks.

(CTPRP) Certified Third Party Risk Professional Practice Test

(CTPRP) Certified Third Party Risk Professional Practice Test

CTPRP Contract Management and Vendor Oversight 4