CRISC: Certified in Risk and Information Systems ControlDemo

Question

What is the PRIMARY reason for conducting periodic vendor risk assessments?

A To assess the vendor's risk mitigation plans
B To verify the vendor's ongoing financial viability
C To monitor the vendor's control effectiveness
D To provide input to the organization's risk appetite

Explanation

Periodic vendor risk assessments provide ongoing assurance that a vendor’s controls remain effective and that vendor-related risks continue to be managed appropriately as conditions, services, and threats change.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1285

Community Discussion