CIS-TPRM

CIS-TPRM practice questions, page 2 of 3, with answer review and explanations.

Question 6

What is the advantage of using both TPRM and GRC/IRM?

  1. Non-compliant controls automatically adjust the risk score for a third-party entity
  2. Primary third-party contacts can then see their overall non-compliant risk score
  3. All compliance controls are automatically visible to the third-party risk manager
  4. Third-party Risk engagements automatically match with Audit engagements

Question 7

As a final step before closing the Third-party Risk Assessment, what task(s) would the Risk Assessor typically do?

  1. Flag questions for follow up
  2. Review comments and evaluates the risk
  3. Create issues within the assessment
  4. Perform a tiering assessment

Question 8

How are Third-party Risk questionnaires and document requests displayed on the Third-party Portal?

  1. As separate requests and can be assigned to different third-party contacts
  2. As a single assessment assigned to a single engagement contact
  3. As separate requests and can only be assigned to the same third-party contact
  4. As a single assessment assigned to a single third-party contact

Question 9

What other record is created when an element classification is created?

  1. Classification component definition
  2. Classification component criteria
  3. Engagement component definition
  4. Engagement component criteria

Question 10

To what do third parties have direct access?

  1. Update and respond to issues and tasks
  2. View other third party’s assessment responses
  3. Modify issue remediation workflow
  4. View other third party’s issues and tasks