Third Party & Supply Chain Risk Management Quiz
Test your knowledge with our Third Party & Supply Chain Risk Management Quiz.
Extending business activities beyond organisational boundaries to create value for the organisation is not new.
However, the quantity and complexity of the relationships that now exist beyond organisational boundaries is increasing, as is regulatory and stakeholder scrutiny. While partnerships with third parties, including critical suppliers, can be beneficial to the organisation on so many levels, such alliances can expose the organisation to many unknowns, and those unknowns will undoubtedly increase the level of risk.
The key, then, is properly managing the infrastructure, systems, staff and outside support to adequately manage that risk.
How much do you know?
The use of third parties can assist management in attaining strategic objectives by reducing costs and revenue.
The answer is false as it reduces costs and increases revenue. Only reduces revenue if you don’t manage the risks properly.
True
False
Approximately what % of direct and indirect operating costs of a business can come from third parties
The answer is up to 80% but people often incorrectly answer 50% as they don’t realise how high it is.
30%
50%
80%
100%
While scrutiny of third parties is increasing, a recent RSAM survey showed that 50% of respondents said that they assess less than ---------% of their vendors
The answer is 15% but people often incorrectly answer 25 & 50 % as they don’t realise how low it is.
75%
15%
50%
25%
The key and common focus of regulators on managing third party risk includes?
The answer is C, but people often incorrectly answer a and d as this has been a focus in the past.
Contract form & content, supplier due diligence, supplier financials review, ongoing governance
Relationship management, supplier due diligence, ongoing governance, contract form & content
Supplier due diligence, insourcing risk management, ongoing governance, contract form and content
Relationship management, supplier due diligence, insourcing risk management, contract form & content
There is a need to create a third-party risk appetite statement that is separate to the organisation’s risk appetite statement for data protection risks
The answer is false as third-party risks are linked to other risk types, and data protection. Look at the number of 3rd party data breaches that occur.
True
False
Which of the following statements has the highest degree of truth?
The answer is C, but people often incorrectly answer B as this is also somewhat true, but higher degree of truth in C.
Third party due diligence is a one-off exercise and is independent of the third-party contract and inherent level of risk
Third party due diligence is an ongoing exercise that helps to manage the third-party contract
Third party due diligence is part of residual risk assessment, is ongoing and helps to manage the third-party contract
Third party due diligence is part of residual risk assessment, is an ongoing but is not related to the third-party contract
What is the average time taken to undertake an initial vendor due diligence exercise?
The answer is A, but people often incorrectly answer B they think the time it takes is low.
The average time is between 10 Hours and 23 hours per vendor
The average time is between 8 Hours and 12 hours per vendor
The average time is between 5 Hours and 8 hours per vendor
The average time is between 15 Hours and 30 hours per vendor
The risk function owns third party risks
The answer is B, but people often incorrectly answer A as they get confused about the three lines of defence. Risk function (second line of defence) provides guidance and oversight but the business/procurement function own the risks.
True
False
Which of the following statements is true?
The answer is D, but people often incorrectly answer B. The reason that A, B, or C is not directly / always true is because the operating model is organisation specific-different models work for different companies based on their business model, size etc.
A decentralised operating model is the best approach for managing third party risks
A hybrid operating model is the best approach for managing third party risks
A centralised operating model is the best approach for managing third party risks
None of the above
The key challenges in the digitisation of supply chains includes.
The answer is C, but people often incorrectly answer A as the key issue around technology and systems is often confused. The technology is available today but due to differing sizes of companies along the supply chain not everyone can afford the same tech, so integration becomes a key challenge.
Costs, lack of skills, technology availability and data quality
Data quality, technology availability, costs, remote working
Data quality, system integration, costs, lack of skills
Data quality, system integration, costs, remote working
Submit Email
Please submit your email before viewing the results
You got {number correct}/{number of questions} correct answers
Well done for taking part - find out more about our Certificate in Supply Chain Risk Management and our training courses on our website.