Which combination of measures helps enhance supply chain security beyond minimum criteria?

• A. Enhanced security governance, continuous monitoring, supplier verification, and incident response testing.
• B. Basic vetting, quarterly reviews, and manual logs.
• C. Onsite audits only.
• D. None.

Answer: (A)

A multi-layered, proactive security program is the idea here. To go beyond minimum criteria, you combine governance that sets clear security roles and policies, continuous monitoring that provides real-time visibility into activities and anomalies, supplier verification to ensure upstream partners meet security standards, and incident response testing to practice how you detect, contain, and recover from incidents.

This mix creates ongoing risk awareness and rapid, practiced responses, not just check-the-box compliance. Enhanced governance provides accountability and a solid framework; continuous monitoring keeps issues from slipping through the cracks; verifying suppliers extends security beyond your own walls; and regular testing of incident response ensures you actually know how to respond when something happens.

The other options lack that comprehensive, dynamic approach. Static vetting with quarterly reviews and manual logs is outdated and labor-intensive without real-time insights. Onsite audits alone capture only a snapshot and miss day-to-day risk, and none offers a complete, ongoing, layered defense.