Which term describes the long-term viability of a vendor?

• A. Internal Environment
• B. Shared Controls
• C. Vendor Viability
• D. Shared Responsibility Model

Answer: (B)

Evaluating whether a vendor will be able to continue delivering products or services over the life of a contract is about vendor viability. This concept focuses on the vendor’s long-term sustainability—financial health, market position, product roadmap, and continuity plans—which directly affects risk of service disruption, pricing, and contractual reliability. When you assess vendor viability, you’re looking for signs the vendor can endure changes in the market, maintain support, and fulfill commitments for the duration of the relationship.

Other terms describe different ideas. Internal environment refers to your organization’s own security context and controls, not the vendor’s ability to stay in business. Shared controls describe how responsibility for implementing and testing controls is divided between you and the vendor. The shared responsibility model outlines who handles security duties in cloud or service models, rather than assessing a vendor’s future viability.