Study. uk . com
  1. Home
  2. All questions
  3. Question 473

CISM study material · question 473 of 1000

Which two factors does NIST say should determine how deep and mature a supply chain risk capability needs to be? Choose two.

  1. The number of suppliers held in its own portfolio at any given time
  2. The market share held by its largest supplier
  3. Its risk appetite and risk tolerance
  4. The organisation's mission and compliance requirements
Show the answer

Answer: D. The organisation's mission and compliance requirements
C. Its risk appetite and risk tolerance

SP 800-161r1 sizes the capability against how distinctive the mission is, what compliance demands, the operating environment, and where appetite and tolerance sit — not against supplier headcount.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 2.1 The Business Case for C-SCRM

Challenge yourself on this topic → Study as cards