CTPRP Performance Techniques 3 — Questions and Answers
Question 1: Which technique allows an organization to evaluate vendor performance without requiring the vendor to be on-site?
- On-site audit
- Remote assessment using standardized questionnaires and documentation review (Correct answer)
- Physical inspection of vendor facilities
- Interview of vendor C-suite executives in person
Correct answer: Remote assessment using standardized questionnaires and documentation review
Remote assessments using questionnaires and document requests enable performance evaluation without travel or disruption.
Question 2: A benchmarking exercise compares a vendor's performance against industry peers. What is the main risk of relying solely on benchmarking data?
- It is too costly to conduct
- Industry benchmarks may not reflect the organization's specific contractual requirements (Correct answer)
- Benchmarking always results in contract termination
- Regulators prohibit the use of benchmarking
Correct answer: Industry benchmarks may not reflect the organization's specific contractual requirements
Industry benchmarks represent general market standards that may not align with bespoke SLAs and risk thresholds in a specific contract.
Question 3: What does a 'right to audit' clause in a vendor contract primarily enable?
- The vendor's right to audit the client's internal controls
- The client's right to independently verify vendor performance, controls, and compliance (Correct answer)
- Automatic contract renewal upon successful audit
- The regulator's right to access vendor premises
Correct answer: The client's right to independently verify vendor performance, controls, and compliance
A right-to-audit clause gives the client legal authority to independently examine vendor operations to verify stated performance and compliance.
Question 4: Which performance technique involves setting minimum acceptable thresholds below which a vendor triggers a formal remediation plan?
- Balanced scorecard
- Performance floor (minimum performance standard) (Correct answer)
- Benchmarking
- Continuous monitoring dashboard
Correct answer: Performance floor (minimum performance standard)
Performance floors define the minimum acceptable level; breaching them automatically initiates a remediation or escalation workflow.
Question 5: An organization receives conflicting signals: a vendor's self-reported KPIs show green status, but end-user complaints are rising. What should the risk team do?
- Accept the vendor's self-reported data as authoritative
- Cross-validate using independent data sources such as ticketing systems or end-user surveys (Correct answer)
- Immediately terminate the vendor relationship
- Issue a public statement about the discrepancy
Correct answer: Cross-validate using independent data sources such as ticketing systems or end-user surveys
Cross-validation with independent data sources helps detect reporting inaccuracies and provides a more accurate performance picture.
Question 6: What is the function of a remediation plan in the vendor performance management lifecycle?
- To formally end the vendor relationship
- To document corrective actions and timelines when a vendor fails to meet performance standards (Correct answer)
- To renegotiate pricing after contract expiration
- To onboard a replacement vendor immediately
Correct answer: To document corrective actions and timelines when a vendor fails to meet performance standards
A remediation plan outlines specific corrective steps, owners, and deadlines to bring the vendor back into compliance with performance expectations.
Question 7: How does continuous monitoring differ from periodic vendor assessments in performance management?
- Continuous monitoring requires more paperwork
- Continuous monitoring provides real-time or near-real-time data while periodic assessments are point-in-time snapshots (Correct answer)
- Periodic assessments are always more accurate than continuous monitoring
- Continuous monitoring is only applicable to financial vendors
Correct answer: Continuous monitoring provides real-time or near-real-time data while periodic assessments are point-in-time snapshots
Continuous monitoring detects performance changes dynamically, whereas periodic assessments may miss issues that arise between scheduled reviews.
CTPRP Performance Techniques 3
Which technique allows an organization to evaluate vendor performance without requiring the vendor to be on-site?