CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ72

Information Security Risk Management

Which option is the BEST measure of the maturity of a vendor risk management process?

  • A Number of vendors rejected because of security review results
  • B Percentage of vendors that are regularly reviewed against defined criteria
  • C Percentage of vendors that have gone through the vendor on boarding process
  • D Average time required to complete the vendor risk management process
Explanation

Vendor risk management maturity is best demonstrated by consistent, recurring reviews of vendors using established criteria. This indicates that the process is formalized, repeatable, and maintained throughout the vendor relationship.

Community Discussion

No comments yet. Be the first to start the discussion!