What is the definition of ‘Risk Management’?
Correct Answer: D
Risk Management is the process to identify, assess, and respond to risks, threats, and vulnerabilities that could compromise the business. This definition encapsulates the comprehensive approach required to mitigate potential dangers that might impact organizational operations, ensuring a proactive stance in safeguarding against possible disruptions.
Which of the following is the main benefit of using the Vendor Portal?
Correct Answer: D
The main benefit of using the Vendor Portal is more efficiently completing Assessments via the Vendor Portal. The other options mention methods and means of communication, but the key benefit highlighted is the efficiency in completing the assessments themselves.
Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?
Correct Answer: A
The baseline email notifications that help to automate the vendor risk management process are installed with the GRC: Vendor Risk Management plugin. This plugin specifically deals with vendor risk management, making it the correct choice for automating related email notifications.
Which statement best describes the role assignment of vendor contacts in Vendor Risk Management?
Correct Answer: D
When vendor contacts are created, they are automatically assigned the snc_external role. This ensures that they have the appropriate permissions and access relevant to their external status in Vendor Risk Management.
What can a vendor contact do in the Vendor Portal? (Choose four.)
Correct Answer: ADEF
Given the context of a Vendor Portal, the actions that make logical sense for a vendor contact are updating answers to returned questionnaires, reviewing and responding to issues created by the assessing organization, managing vendor contacts and task assignments within the vendor organization, and responding to assessments sent by the assessing organization. These actions are directly related to the tasks a vendor would typically need to perform within a dedicated portal for vendor management.