Which of the following best describes the key elements of vendor governance?

• A. Due diligence
• B. Performance monitoring and exit/transition planning
• C. Data security
• D. All of the above

Answer: (D)

Vendor governance is a holistic approach to managing external relationships, focusing on selecting the right partner, overseeing performance, and planning for a smooth disengagement when needed. The initial due diligence sets the baseline by assessing capability, risk, regulatory alignment, and expectations. Ongoing performance monitoring ensures the vendor delivers as agreed, maintains service levels, and stays compliant throughout the engagement. An exit or transition plan is crucial to ensure a controlled disengagement, including data handover, knowledge transfer, and continuity of operations. Data security underpins all of this by protecting sensitive information, enforcing access controls, and ensuring incidents are handled properly. When you combine due diligence, performance monitoring, exit planning, and data security, you cover the full spectrum of governance needed to manage risk, performance, and continuity, so all of the above best describes the key elements of vendor governance.