What security considerations are commonly required for IT procurements in CPPB Domain VI?

• A. Brand alignment and marketing priorities
• B. Compliance with data protection, privacy, and security standards; CUI handling, access controls, and vendor risk management
• C. Cost minimization and vendor diversification
• D. Color and design compatibility

Answer: (B)

The main concept being tested is how IT procurements are secured through formal protections for information and risk management. In practice, this means requiring compliance with data protection, privacy, and security standards; clear rules for handling Controlled Unclassified Information (CUI) or other sensitive data; robust access controls so only authorized people can reach systems and data; and active vendor risk management to assess and monitor the supplier’s security posture and supply chain. Together, these elements help ensure regulatory compliance, protect sensitive information, and reduce the chance of breaches or disruptions during and after the purchase.

The other aspects don’t address security concerns. Brand alignment, marketing priorities, color or design compatibility, and similar factors concern appearance or market strategy rather than safeguarding data and managing risk in IT procurements.