Isaca Exam CCOA Topic 2 Question 7 Discussion

To maintain consistent management of supply chain risk, it is essential to periodically confirm that suppliers meet their contractual obligations.

Risk Assurance: Verifies that suppliers adhere to security standards and commitments.

Compliance Monitoring: Ensures that the agreed-upon controls and service levels are maintained.

Consistency: Regular checks prevent lapses in compliance and identify potential risks early.

Supplier Audits: Include reviewing security controls, data protection measures, and compliance with regulations.

Incorrect Options:

A . Seeking feedback from procurement: Useful but not directly related to risk management.

C . Counting incident tickets: Measures service performance, not risk consistency.

D . Informal meetings: Lacks formal assessment and verification of obligations.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 9, Section 'Supply Chain Risk Management,' Subsection 'Monitoring and Compliance' - Periodic verification of contractual compliance ensures continuous risk management.