When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

Question

Options

• AThis makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention
• BContracting rules typically require you to have conversations with two or more groups
• CDiscussing decisions with a very large group of people always provides a better outcome
• DIt helps to avoid regulatory or internal compliance issues

• A
  3% (1)
• B
  14% (4)
• C
  7% (2)
• D
  76% (22)

Explanation

D is correct because procuring new products and services introduces potential legal, technical, and compliance risks. Cross-functional review - legal, IT security, privacy, engineering, suppliers - ensures the acquisition meets regulatory requirements (GDPR, HIPAA, SOX, etc.) and internal policies before commitments are made, not after a costly problem surfaces.

Why the distractors are wrong:

• A is wrong because Data Loss Prevention is a specific data-handling tool, not a rationale for broad procurement collaboration.
• B is wrong because no universal contracting rule mandates conversations with a minimum number of groups - this misrepresents how procurement governance works.
• C is wrong because large group size alone doesn't guarantee better outcomes; it's the right expertise that matters, not sheer headcount.

Memory tip: Think of the acronym RICE - Regulatory, Internal compliance, Contracts, Engineering risks. Collaborative procurement reviews exist to catch these four failure modes early. When you see a question about why to involve diverse stakeholders, the answer is almost always about compliance and risk avoidance, not process mechanics or group size.

No community discussion yet for this question.