Certified Implementation Specialist -Vendor Risk Management CIS-VRM Free Dumps

dumps2023-06-14T10:38:18+08:00

To prepare for CIS-VRM exam, you may study relevant vendor risk management frameworks, industry best practices, regulatory guidelines, and practical implementation strategies. We just cracked the latest Certified Implementation Specialist -Vendor Risk Management CIS-VRM exam dumps, which are valuable for you to test all the related skills. Free ServiceNow Certification CIS-VRM exam dumps are below.

Page 1 of 2

1. Which of these must be true in order for a vendor risk issue to be visible in the Vendor Portal?

There must be at least one secondary contact for the vendor

The primary vendor contact must have the sn_vdr_issues role

Issues are always visible in the vendor portal

The Visible in vendor portal field must have a value of true

2. What are the features of Vendor Risk Issues? (Choose two.)

Generate audit tasks for the vendor risk team

Can only be seen by the customer’s vendor risk team

Provide vendor direct access to update and respond to Issues

Can be generated on-demand or automatically due to an incorrect answer

3. During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?

Create issues from the assessment if necessary

Update the vendor risk score

Email the vendor

Answer questions the vendor forgot to answer

4. Vendor Risk Tasks are saved to which one of the following tables?

[task]

[planned_task]

[sn_vendor_risk_task]

[sn_vdr_risk_asmt_task]

5. How are Vendor Risk questionnaires and document requests displayed on the Vendor Portal?

As separate requests and can be assigned to different vendor contacts

As separate requests and can only be assigned to the same vendor contact

As a single assessment assigned to a single vendor contact

As a single assessment assigned to a single engagement contact

6. Which of these options can be used in data cleansing when importing vendor data? (Choose three.)

Data Policies

Access Control Lists

Field Normalization Rules

Fix Scripts

Data Import or Data Source Transform

UI Policies

7. What is the definition of ‘Risk Management’?

Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined

The process of conforming to standards, policies, and remediation of audit findings

The elimination of vulnerable surface area in an enterprise environment

Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business

8. The Vendor records are stored in which table?

Company [core_company]

Department [cmn_department]

Task [task]

User [sys_user]

9. Which statements most accurately describe assignments to vendor contacts? (Choose two.)

Individual sections in the questionnaire or document request can be assigned

A questionnaire or document request cannot be assigned to multiple vendor contacts

A questionnaire can be read by vendor contacts that are not assigned

A questionnaire can only be completed by assigned vendor contacts

10. What third-party vendor security evaluation solutions are commonly integrated with VRM out-of-the-box? (Choose two.)

MyScoreMetrics

Vendor Insights

Bitsight

Security Scorecard

Page 2 of 2

11. For each questionnaire template/assessment metric type, how many vendor risk areas can be designated?

One

As many as desired

None

Two

12. Which functions can be performed in the Vendor Portal? (Choose three.)

Assessment response

Contact Management

Issue remediation

Schedule web meetings

Requests via virtual agent

13. Where can the score for each Assessment Metric or Metric Category be configured?

Assessment Metric Category record

Assessment Template record

Assessment record

Assessment Metric Type record

14. Roles preceded by sn_vdr_risk are for which scope?

GRC: Vendor Risk Remediation

GRC: Vendor Risk Core

GRC: Risk Management

GRC: Vendor Risk Management

15. Internal roles include: (Choose three.)

Vendor Contact sn_vdr_risk.vendor_contact

Vendor Risk Manager sn_vdr_risk_asmt.vendor_risk_manager

Primary Vendor Contact sn_vdr_risk_asmt.prim_vendor_contact

Vendor Risk Assessor sn_vdr_risk_asmt.vendor_assessor

Vendor Risk Reviewer sn_vdr_risk_asmt.vendor_assessment_reviewer

16. Who is able to change the password for the vendor contact? (Choose two.)

Vendor Contract Relationship Manager

sys_admin

Vendor contact via the Forgot Password link

Vendor Risk Reviewer

17. Which statement accurately describes the visibility and audit history of actions and communications in the Vendor Risk Management application?

The vendor and assessor interactions are captured in the Vendor Risk Issue record and are only visible from the portal view

The Vendor Risk Issues created and the activity and history are lost from the Vendor Assessment Portal when the associated vendor contact changes

The Vendor Risk Issues created and the activity and history will remain in the Vendor Assessment Portal even when vendor contacts change

The vendor and assessor interactions are captured in the Vendor Risk Issue record and are only visible from the platform view

18. To what type of assessment record can a vendor contact respond?

Vendor tiering assessment

Vendor risk assessment

Customer assessment

External monitoring assessment

Certified Implementation Specialist -Vendor Risk Management CIS-VRM Free Dumps

Certified Implementation Specialist -Vendor Risk Management CIS-VRM Free Dumps

Share this post

Leave a Reply Cancel reply

Related Posts