Study. uk . com
  1. Home
  2. All questions
  3. Question 489

CISM study material · question 489 of 1000

At which step of the procurement process does NIST place robust due diligence research producing a supplier risk profile?

  1. Contract award, once the winning bidder is known
  2. Plan procurement, before requirements are defined
  3. Market analysis, before any bid is solicited
  4. Operations and maintenance, after go-live
Show the answer

Answer: C. Market analysis, before any bid is solicited

SP 800-161r1 places deeper due diligence on candidate suppliers and products in market analysis, producing a supplier risk profile before anything is solicited.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process

Challenge yourself on this topic → Study as cards