Study. uk . com
  1. Home
  2. All questions
  3. Question 491

CISM study material · question 491 of 1000

During market research an organisation finds only two viable suppliers exist worldwide for a needed component. How does NIST treat that observation?

  1. As a due diligence finding, since market concentration reveals interdependencies within the supply chain
  2. As irrelevant to security, being a commercial matter
  3. As grounds to abandon the procurement
  4. As a reason to accept a lowest price selection
Show the answer

Answer: A. As a due diligence finding, since market concentration reveals interdependencies within the supply chain

SP 800-161r1 lets due diligence take in how concentrated the market for the product or service is, reading that concentration as a way of finding interdependencies in the supply chain.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process

Challenge yourself on this topic → Study as cards