CIS-VRM 試験問題を無料オンラインアクセス

What is the minimum role required to create a new Vendor Risk Issue?

• A.Vendor Risk Assessor [sn_vdr_risk_asmt.vendor_assessor]
• B.System Administrator [admin]
• C.Vendor Risk Manager [sn_vdr_risk_asmt.vendor_risk_manager]
• D.Vendor Assessment Reviewer [sn_vdr_risk_asmt.vendor_assessment_reviewer]

Which statement accurately describes the visibility and audit history of actions and communications in the Vendor Risk Management application?

• A.The Vendor Risk Issues created and the activity and history will remain in the Vendor Assessment Portal even when vendor contacts change
• B.The Vendor Risk Issues created and the activity and history are lost from the Vendor Assessment Portal when the associated vendor contact changes
• C.The vendor and assessor interactions are captured in the Vendor Risk Issue record and are only visible from the platform view
• D.The vendor and assessor interactions are captured in the Vendor Risk Issue record and are only visible from the portal view

During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?

• A.Create issues from the assessment if necessary
• B.Email the vendor
• C.Answer questions the vendor forgot to answer
• D.Update the vendor risk score

Which GRC records can be related to an Entity? (Choose three.)

• A.Controls
• B.Risks
• C.Policies
• D.Vendors
• E.Entity Types

Which could have an impact on the vendor's Risk Assessment rating? (Choose three.)

• A.Reassigning a questionnaire to a contact
• B.Omitting documentation
• C.Spelling errors
• D.Leaving answers blank
• E.Answering one or more questions incorrectly