Quiz – Third-Party Risk Management

Question 1 of 6

1. Question

What share of organizations are affected by third-party breaches annually?

Approximately 60 percent

Correct Incorrect Correct answer

5 percent

Correct Incorrect Correct answer

20 percent

Correct Incorrect Correct answer

95 percent

Correct Incorrect Correct answer

Question 2 of 6

2. Question

Which incident illustrates a supply chain compromise?

The SolarWinds compromised update

Correct Incorrect Correct answer

Heartbleed

Correct Incorrect Correct answer

WannaCry only

Correct Incorrect Correct answer

The Y2K bug

Correct Incorrect Correct answer

Question 3 of 6

3. Question

What does effective vendor evaluation combine?

ISO 27001 controls, CISA guidelines, and tiered assessment

Correct Incorrect Correct answer

Random sampling

Correct Incorrect Correct answer

A marketing review

Correct Incorrect Correct answer

A salary audit

Correct Incorrect Correct answer

Question 4 of 6

4. Question

What does ongoing third-party management involve?

Contractual safeguards, monitoring, and audit rights

Correct Incorrect Correct answer

Ignoring vendors after signup

Correct Incorrect Correct answer

A single one-time review

Correct Incorrect Correct answer

Deleting all contracts

Correct Incorrect Correct answer

Question 5 of 6

5. Question

Match each third-party concept to its description.

Sort elements

A supply chain attack vector
Based on vendor criticality and impact
An ongoing management safeguard
Builds mutual security awareness

Compromised vendor software

Correct Incorrect Correct answer

Tiered assessment

Correct Incorrect Correct answer

Audit rights

Correct Incorrect Correct answer

Collaborative partnership

Correct Incorrect Correct answer

Question 6 of 6

6. Question

Name the 2020 supply chain incident, cited in the script, where one compromised update affected thousands of organizations.

Correct Incorrect Correct answer