Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
An effective vendor risk management plan is characterized by its vendor due diligence policy. Vendor onboarding is one of the most delicate phases of a VRM program because it has a significant impact on an organization’s security posture. Poor onboarding practices will overlook the different types of risks and security vulnerabilities of new vendors, adding these risk to your risk profile. "https://www.upguard.com/blog/vendor-risk-management#:~:text=Vendor%20risk%20management%20is%20an,compliance%2C%20legal%20and%20regulatory%20risks."
Option B
The best indicator of the effectiveness of the vendor risk management process is an increase in the percentage of vendors with a completed due diligence review. This suggests that the organization is actively assessing and evaluating the risks associated with its vendors, which is a fundamental aspect of effective vendor risk management. Completing due diligence reviews helps ensure that vendors are meeting security and compliance requirements, reducing potential risks to the organization.