- Can you tell me why do we do vendor risk management & what's the purpose of vendor risk management ?
- What is risk according to you ?
- I will give you a 3 examples, can you rate its risk, and what level of risk they are ?
1. Incident
2. PCB simulation
3. Laptop loss
- I will give you one vendor, let men know what the data you will assessment,
EX: vendor payroll a company is providing a service to our organization as pay roll vendor, i ask you to do vendor assessment to that payroll vendor, what will you perform the risk assessment on them ?
- What kind of internal audits/Internal trainings you have given ?
- Physical security compliance control what will you do in that security controls/compliance ?