CIPS L6M7 Exam - Topic 1 Question 2 Discussion

Actual exam question for CIPS's L6M7 exam

Question #: 2
Topic #: 1

[All L6M7 Questions]

At what stage in the procurement cycle should a buyer clarify a supplier's cybersecurity policy?

APre-qualification

BContract award

CContract renewal

DPre-start meeting

Show Suggested Answer

Suggested Answer: A

Cybersecurity policies should be evaluated as early as possible in the procurement process. The pre-qualification stage allows buyers to assess suppliers' security practices before inviting them to bid, ensuring that only secure vendors are considered. (P.156)

by Wava at Feb 09, 2025, 10:59 PM

Limited Time Offer

25%

Off

Get Premium L6M7 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Skye

9 months ago

Contract renewal? That’s too late to check!

upvoted 0 times

...

Willetta

9 months ago

Agreed, pre-qualification is key for assessing risks.

upvoted 0 times

...

Sage

10 months ago

Wait, why would you do it then? Seems late!

upvoted 0 times

...

Peter

10 months ago

I think it should be at contract award.

upvoted 0 times

...

Dierdre

10 months ago

Definitely during pre-qualification!

upvoted 0 times

...

Gladys

10 months ago

I’m leaning towards the contract renewal stage, but I recall something about needing to address these issues earlier in the process.

upvoted 0 times

...

Trevor

11 months ago

I feel like it could also be important to discuss cybersecurity at the pre-start meeting, especially if there are specific requirements to meet.

upvoted 0 times

...

Eun

11 months ago

I remember a practice question that mentioned checking policies before the contract is awarded. That might be the best time to ensure everything is in place.

upvoted 0 times

...

Sharen

11 months ago

I think the cybersecurity policy should be clarified during the pre-qualification stage, but I'm not entirely sure if that's the right time.

upvoted 0 times

...

Leoma

11 months ago

I'm pretty confident the answer is A. Checking the cybersecurity policy is a key part of the pre-qualification process to make sure the supplier meets your security requirements.

upvoted 0 times

...

Adrianna

11 months ago

Definitely A - pre-qualification. You need to vet the supplier's cybersecurity before you even get to the contract stage. That's a critical piece of information to have upfront.

upvoted 0 times

...

Celia

11 months ago

Hmm, I'm not totally sure about this one. I was thinking it might be D - pre-start meeting, since that's when you'd want to go over all the contract details. But I could see the pre-qualification stage making sense too.

upvoted 0 times

...

Carin

11 months ago

I think this is a tricky one. The cybersecurity policy seems like it should be checked early on, so I'm leaning towards A - pre-qualification.

upvoted 0 times

...

Yuette

2 years ago

Okay, let's be real here. Cybersecurity is no joke. I'd rather not find out the hard way that our supplier is using their kid's password as their admin login.

upvoted 0 times

Vincenza

1 year ago

D) Pre-start meeting

upvoted 0 times

...

Lorita

1 year ago

C) Contract renewal

upvoted 0 times

...

Tesha

1 year ago

B) Contract award

upvoted 0 times

...

Justine

1 year ago

A) Pre-qualification

upvoted 0 times

...

Jovita

2 years ago

Hmm, I'm not sure. Maybe we should just ask the supplier to wear a tin foil hat during the contract negotiations. That should keep the hackers at bay, right?

upvoted 0 times

Tamar

1 year ago

B) Contract award

upvoted 0 times

...

Haydee

1 year ago

A) Pre-qualification

upvoted 0 times

...

Pansy

2 years ago

As a cybersecurity expert, I can tell you that option D is the clear choice. The pre-start meeting is the perfect time to hash out those details and make sure everyone is on the same page.

upvoted 0 times

Eric

1 year ago

D) Pre-start meeting

upvoted 0 times

...

Jame

1 year ago

C) Contract renewal

upvoted 0 times

...

Art

1 year ago

B) Contract award

upvoted 0 times

...

Chauncey

1 year ago

A) Pre-qualification

upvoted 0 times

...

Germaine

2 years ago

Definitely pre-qualification. Waiting until the contract award or renewal would be way too late to address any security concerns.

upvoted 0 times

Olive

1 year ago

Actually, I think it's best to clarify the supplier's cybersecurity policy even before the pre-start meeting to ensure everything is in place before the contract is awarded.

upvoted 0 times

...

Tomas

2 years ago

D) Pre-start meeting

upvoted 0 times

...

Viva

2 years ago

I agree, it's important to address cybersecurity concerns early on in the procurement process.

upvoted 0 times

...

Karl

2 years ago

A) Pre-qualification

upvoted 0 times

...

Isabella

2 years ago

I think it can also be done at contract renewal to ensure ongoing compliance.

upvoted 0 times

...

Jin

2 years ago

I agree with Lorenza, it's important to clarify cybersecurity policy early on.

upvoted 0 times

...

Adolph

2 years ago

I think it's important to clarify the supplier's cybersecurity policy during the pre-qualification stage. That way, we can ensure they meet our security standards before even considering them for the contract.

upvoted 0 times