Supply Chain Risk Management Quiz

1. A cyber attack on a critical supplier affecting product delivery represents which risk type?

Operational risk

Reputational risk

Financial risk

All of the above

Submit

3. Which practice helps organizations identify single points of failure in supply chains?

Vendor diversification analysis

Quarterly earnings reviews

Annual budget planning

Customer satisfaction surveys

4. What is supply chain resilience?

The ability to recover from disruptions and maintain operations

Reducing supplier costs

Increasing inventory indefinitely

Avoiding all vendor relationships

5. True or False: Organizations should conduct due diligence only for high-risk vendors.

True

False

Submit

7. Which standard provides requirements for information security management in supply chains?

ISO 27001

ISO 9001

ISO 14001

ISO 45001

8. What is the purpose of vendor security scorecards?

To track vendor performance against security and compliance metrics

To determine vendor pricing

To assess employee satisfaction

To measure market share

9. True or False: Supply chain risk management is primarily the IT department's responsibility.

True

False

Submit

11. What is the primary purpose of supply chain risk management in a governance framework?

To reduce procurement costs only

To identify, assess, and mitigate risks from vendors and third parties

To eliminate all supplier relationships

To increase inventory levels

12. What does SLA stand for in vendor management context?

Service Level Agreement

Security Liability Assessment

Supply Logistics Arrangement

Supplier Limitation Accord

13. Which of the following are essential components of a vendor management program?

Vendor selection, onboarding, and continuous monitoring

Initial contract signing only

Annual financial reviews

Quarterly marketing assessments

14. True or False: Vendor security assessments are a one-time requirement.

True

False

Submit

16. What is a primary control for managing third-party cyber risks?

Vendor security questionnaires and audits

Ignoring vendor security practices

Sole reliance on vendor certifications

Eliminating all vendor contracts

17. Which framework provides guidance on supply chain security and resilience?

NIST Cybersecurity Framework

ISO 31000 Risk Management

NIST SSDF (Secure Software Development Framework)

All of the above

18. Identify the key risk when a single vendor supplies a critical component.

Vendor concentration risk

Market inflation risk

Regulatory compliance risk

Employee turnover risk

19. What does SCRM stand for in supply chain management?

Supplier Compliance Review Model

Supply Chain Risk Management

Strategic Cost Reduction Method

Secure Chain Regulatory Mechanism

20. Which assessment method evaluates a vendor's security controls and compliance posture?

Financial audit

Third-party risk assessment

Market analysis

Competitive benchmarking

SecurityX Supply Chain Risk Management Quiz

1. A cyber attack on a critical supplier affecting product delivery represents which risk type?

2.

What first name or nickname would you like us to use?

2. Implementing ______ agreements with vendors ensures accountability for security and compliance obligations.

3. Which practice helps organizations identify single points of failure in supply chains?

4. What is supply chain resilience?

5. True or False: Organizations should conduct due diligence only for high-risk vendors.

6. A data breach at a vendor due to weak security controls is an example of ______ risk.

7. Which standard provides requirements for information security management in supply chains?

8. What is the purpose of vendor security scorecards?

9. True or False: Supply chain risk management is primarily the IT department's responsibility.

10. Continuous monitoring of vendor ______ is essential for identifying emerging threats.

11. What is the primary purpose of supply chain risk management in a governance framework?

12. What does SLA stand for in vendor management context?

13. Which of the following are essential components of a vendor management program?

14. True or False: Vendor security assessments are a one-time requirement.

15. Supply chain ______ occurs when a vendor's systems are compromised, affecting downstream organizations.

16. What is a primary control for managing third-party cyber risks?

17. Which framework provides guidance on supply chain security and resilience?

18. Identify the key risk when a single vendor supplies a critical component.

19. What does SCRM stand for in supply chain management?

20. Which assessment method evaluates a vendor's security controls and compliance posture?