During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?
Suggested Answer: A
Get Premium CIS-VRM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
TR
Trina
12 months ago
I agree with A, but B is also important for tracking risk levels.
LU
Luisa
12 months ago
D is a good move, helps clarify things for the vendor.
MO
Mollie
1 year ago
Wait, can they really email the vendor during this phase? Seems odd.
SH
Sherill
1 year ago
I think B makes more sense, updating scores is crucial.
KI
Kiera
1 year ago
Definitely A, creating issues is key!
LA
Lai
1 year ago
I practiced a question similar to this, and I think answering questions the vendor forgot to answer could be relevant, but it might not be the main action taken.
GA
Gary
1 year ago
I feel like emailing the vendor could be part of the process, but I'm not confident if that's specifically during this phase.
AM
Amber
1 year ago
I'm not entirely sure, but I remember something about updating the vendor risk score being important in this phase.
FR
Francesco
1 year ago
I think during the Generating Observations phase, the Risk Assessor might create issues from the assessment if necessary. That sounds familiar.
HE
Heike
1 year ago
Hmm, I'm a bit confused about the difference between the current effective account and the current user's account. I'll need to review that before answering.
ME
Melodie
1 year ago
I'm pretty confident about this one. I think the correct answers are B and D.
MI
Mickie
1 year ago
Okay, I've got this. I'm pretty sure we need to add a data connector and create an analytics rule to get the alert we need.
DO
Dorethea
1 year ago
I feel like I read somewhere that previous data could still be useful, but only if engineers make the proper corrections first. So maybe C is the answer?