Free Certified Implementation Specialist – Vendor Risk Management Exam CIS-VRM Exam Practice Test

What are the baseline mandatory fields when creating a new Vendor Contact? (Choose three.)

• Name (First and Last)
• Vendor
• Department
• Email
• Role

A Vendor Risk Manager needs to run a report displaying Critical Vendors. On which table would this person run a report?

• Company [core_company]
• Vendor Risk Issue [sn_var_asmt_issue]
• Vendor Contact (vm_vdr_contact]
• Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]

What can be used to automatically assign a Vendor tier value?

• A Risk Assessment
• A configuration setting
• A Tiering Assessment
• A Vendor Tiering Rule
• A Visual Task Board

During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?

• Create issues from the assessment if necessary
• Update the vendor risk score
• Email the vendor
• Answer questions the vendor forgot to answer

Who is able to change the password for the vendor contact? (Choose two.)

• Vendor Contract Relationship Manager
• sys_admin
• Vendor contact via the Forgot Password link
• Vendor Risk Reviewer

Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected. What role is required for this functionality?

• The Vendor Administrator role is required for this functionality
• The Data Administrator role is required for this functionality
• The User Administrator role is required for this functionality
• The System Administrator role is required for this functionality

Which statements most accurately describe assignments to vendor contacts? (Choose two.)

• Individual sections in the questionnaire or document request can be assigned
• A questionnaire or document request cannot be assigned to multiple vendor contacts
• A questionnaire can be read by vendor contacts that are not assigned
• A questionnaire can only be completed by assigned vendor contacts

What is the definition of ‘Risk Management’?

• Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined
• The process of conforming to standards, policies, and remediation of audit findings
• The elimination of vulnerable surface area in an enterprise environment
• Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business

A Vendor Risk Task can be created from which of the following records?

• Policy, Assessment, Vendor
• Risk, Policy, Assessment
• Policy, Vendor Risk issue, Assessment
• Vendor Risk Issue, Assessment, Vendor

Key data sources for Vendor Risk reporting include which of the following tables? (Choose two.)

• Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]
• Questionnaire Templates [asmt_metric_type]
• Vendor Benchmark Scores [sn_vdr_client_score]
• Survey Scores [snc_survey_scores]
• Vendor Risk Issue [sn_vdr_risk_asmt_issue]