RCMS Third-Party Compliance Management 5

Question 1

Which approach best demonstrates a risk-based vendor monitoring program?

Accepted Answer

Increasing monitoring frequency and rigor for high-risk, critical vendors

Answer

A risk-based approach allocates greater monitoring resources to vendors that pose higher risk or support critical functions, improving efficiency and effectiveness.

Question 2

An organization's vendor provides payroll services and experiences a ransomware attack. Which continuity concern should the compliance team prioritize?

Accepted Answer

Ability to process employee payroll on time using backup arrangements

Answer

Payroll is a critical operational function, so ensuring business continuity through backup arrangements protects employees and maintains legal compliance with wage payment obligations.

Question 3

What is the purpose of a vendor management inventory (VMI) in a compliance program?

Accepted Answer

To maintain a comprehensive record of all third-party relationships, risk tiers, and assessment statuses

Answer

A VMI provides a centralized, current record of all vendor relationships and their risk classifications, enabling consistent oversight and compliance tracking.

Question 4

When a vendor is subject to a regulatory enforcement action by a government agency, what is the organization's appropriate compliance response?

Accepted Answer

Evaluate the enforcement action's implications for your own regulatory obligations and increase monitoring

Answer

A vendor's regulatory enforcement action may signal elevated risk; the organization must assess implications for its own compliance posture and adjust oversight accordingly.

Question 5

Which of the following best describes 'inherent risk' in third-party vendor risk assessment?

Accepted Answer

The raw risk posed by the vendor relationship before any mitigating controls

Answer

Inherent risk is the level of risk a vendor relationship presents absent any controls, representing the baseline exposure before mitigation is factored in.

(RCMS) Registered Compliance Management Specialist Certification Practice Test

(RCMS) Registered Compliance Management Specialist Certification Practice Test

RCMS Third-Party Compliance Management 5