Information Technology Infrastructure Library (ITIL) Foundation Practice Exam

What categorization would a supplier providing medium risk services to the business receive?

1. Commodity supplier

2. Operational supplier

3. Tactical supplier

4. Strategic supplier

The correct answer is: Tactical supplier

A supplier providing medium risk services to the business would appropriately be categorized as a tactical supplier. This classification reflects the importance of the supplier's services to the organization and the level of risk involved. Tactical suppliers typically fill a specific need and support operational objectives, striking a balance between importance and risk. These suppliers contribute to the day-to-day operations but are not critical to the strategic direction of the organization. Therefore, they are viewed as valuable but not indispensable, aligning well with the medium risk assessment. In contrast, commodity suppliers provide low-risk, standardized services or products that are essential but not specifically tailored to an organization’s strategic needs. Operational suppliers are crucial for the regular operations of a business, potentially involving higher risk, while strategic suppliers play a vital role in long-term business success and are considered high-risk due to their significant impact on strategic objectives. The tactical classification suits a supplier with medium risk because it recognizes both their operational significance and the manageable risk profile.