What is the primary reason for performing vendor management?

The primary purpose of vendor management is to define and maintain a partnership for long-term

success by ensuring vendors align with the organization’s goals and security requirements.

Definition of Vendor Management:

Involves selecting, managing, and monitoring vendors to ensure they meet contractual and

performance standards.

Key Objectives:

Establish strong, collaborative relationships that benefit both parties.

Ensure vendor compliance with security policies and standards.

Why Other Options Are Less Relevant:

Risk Coverage: A component but not the primary purpose.

Vendor Selection Process: Initial step, not the ultimate goal.

Documentation: Necessary but secondary to fostering long-term partnerships.

EC-Council CISO Reference:

Vendor Management Framework: Highlights building sustainable partnerships as a core goal.

Third-Party Risk Management: Aligning vendors with organizational security and business strategies.