Study. uk . com
  1. Home
  2. All questions
  3. Question 472

CISM study material · question 472 of 1000

A supply chain programme sets itself the objective of eliminating supply chain risk. How does NIST frame the correct objective?

  1. Risk should be transferred to the suppliers rather than managed, since they are the ones who introduce it
  2. Plans should manage rather than eliminate risk, since risk is integral to the pursuit of value
  3. Elimination is the correct objective for critical suppliers only, with the rest managed on a lighter basis
  4. Elimination is achievable once all suppliers are certified
Show the answer

Answer: B. Plans should manage rather than eliminate risk, since risk is integral to the pursuit of value

SP 800-161r1 sets the goal as managing supply chain risk rather than removing it, on the ground that risk comes bundled with the pursuit of value.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 2.1 The Business Case for C-SCRM

Challenge yourself on this topic → Study as cards