CIS-VRM Certified Implementation Specialist -Vendor Risk Management Questions and Answers

Vendor Risk Assessor [sn_vdr_risk_asmt.vendor_assessor]

Vendor Assessment Reviewer [sn_vdr_risk_asmt.vendor_assessment_reviewer]

Vendor Risk Manager [sn_vdr_risk_asmt.vendor_risk_manager]

System Administrator [admin]

Metrics

Ratings

Templates

Tiers

Vendor Business Owner

Vendor

Primary Contact

Vendor Manager

sn_vdr_risk_asmt.vendor_portal

sn_vdr_risk_asmt.scoped.vendor_portal_endpoint

sn_vdr_risk_asmt.vendor_portal_endpoint

sn_vdr_risk_asmt.scoped.vendor_portal

Enable communications across vendors

Access completed assessments from vendors

Update vendor contract deadlines

Create issues for the vendor

Create a Primary Contact record for a Vendor

[task]

[planned_task]

[sn_vendor_risk_task]

[sn_vdr_risk_asmt_task]

sn_vendor

company_name

company

vendor_name

The Vendor Administrator role is required for this functionality

The Data Administrator role is required for this functionality

The User Administrator role is required for this functionality

The System Administrator role is required for this functionality

When the Tiering Assessment record state is closed

When the Tiering Assessment record state is Tiering Assessment

When all tiering assessments have been completed

Question weight can be set in the Template Designer

Correct answers can be set in the Template Designer

Questions can be mandatory in the Template Designer

Dependencies between questions cannot be set in the Template Designer

Questions cannot be mandatory in the Template Designer

Document request item [sn_document_template]

Vendor risk assessment [sn_vdr_risk_asmt_assessment]

Assessment metric category [asmt_metric_category]

Assessment metric type [asmt_metric type]

Generate audit tasks for the vendor risk team

Can only be seen by the customer’s vendor risk team

Provide vendor direct access to update and respond to Issues

Can be generated on-demand or automatically due to an incorrect answer

Issue Responses

Email Responses

Task Responses

Assessment Responses

Vendor Risk engagements automatically match with Audit engagements

All compliance controls are automatically visible to the vendor risk manage

Primary vendor contacts can then see their overall non compliant risk score

Non compliant controls automatically adjust the risk score for a vendor entity

Individual sections in the questionnaire or document request can be assigned

A questionnaire or document request cannot be assigned to multiple vendor contacts

A questionnaire can be read by vendor contacts that are not assigned

A questionnaire can only be completed by assigned vendor contacts