As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad…

Question

Options

• ACompliance Risk
• BReputation Risk
• COperational Risk
• DStrategic Risk

• A
  5% (2)
• B
  76% (29)
• C
  13% (5)
• D
  5% (2)

Explanation

Reputation Risk is the right answer because the concern here is specifically about how your organization's brand image could be damaged by association with a vendor whose clients or actions generate bad publicity - this is the textbook definition of reputational exposure through third-party relationships.

• A (Compliance Risk) is wrong because no regulation or legal requirement is being violated; the threat is public perception, not a regulatory breach.
• C (Operational Risk) is wrong because this isn't about a failure in internal processes, systems, or people - it's about brand damage from external association.
• D (Strategic Risk) is wrong because while reputational damage can have strategic consequences, the root cause here is brand perception, not a misaligned business strategy or competitive threat.

Memory tip: If the risk scenario involves how others perceive your organization - think media, clients, public opinion - that's Reputation Risk. A useful phrase: "It's not what you did, it's how it looks."

No community discussion yet for this question.