An Infrastructure Team Is at the End of a Procurement

question 437

Multiple Choice

An infrastructure team is at the end of a procurement process and has selected a vendor. As part of the final negotiation, there are a number of outstanding issues, including: 1. Indemnity clauses have identified the maximum liability. 2. The data will be hosted and managed outside of the company's geographical location. The number of users accessing the system will be small, and no sensitive data will be hosted in the solution. As the security consultant of the project, which of the following should the project's security consultant recommend as the NEXT step?

• A) Develop a security exemption, as it does not meet the security policies.
• B) Require the solution owner to accept the identified risks and consequences.
• C) Mitigate the risk by asking the vendor to accept the in-country privacy principles.
• D) Review the procurement process to determine the lessons learned.

---

Definitions:

Incremental Cash Flow

Consists of the additional operating cash flow an organization receives from taking on a new project.

Net Working Capital

The gap between what a business owns as current assets and what it owes in current liabilities, revealing the liquid funds available for operational purposes.

Sunk Cost

Costs that have already been incurred and cannot be recovered or altered by future actions.

Investment Decision

The process of evaluating and selecting where to allocate funds in various financial instruments or projects to maximize returns or achieve financial goals.