CCOA: Certified Cybersecurity Operations AnalystDemo

By Isaca · Question Mode

QuestionQ70

Securing Assets

Which of the following is the MOST effective method for ensuring that an organization’s management of supply chain risk remains consistent?

  • A Periodically confirming suppliers' contractual obligations are met
  • B Regularly meeting with suppliers to informally discuss issues
  • C Regularly seeking feedback from the procurement team regarding supplier responsiveness
  • D Periodically counting the number of incident tickets associated with supplier services
Explanation

Periodically verifying that suppliers meet their contractual obligations applies a defined, enforceable set of requirements consistently and identifies noncompliance. Informal discussions, procurement feedback, and incident-ticket counts are supplementary or retrospective measures rather than a consistent control mechanism. NIST’s C-SCRM guidance emphasizes defining and communicating supplier requirements as part of operating a supply-chain risk-management capability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!