ExamGecko
Home Home / ISC / CCSP
Question list
Search
Search

Question 406 - CCSP discussion

Report
Export

The BIA can be used to provide information about all the following, except:

A.
BC/DR planning
Answers
A.
BC/DR planning
B.
Risk analysis
Answers
B.
Risk analysis
C.
Secure acquisition
Answers
C.
Secure acquisition
D.
Selection of security controls
Answers
D.
Selection of security controls
Suggested answer: C

Explanation:

The business impact analysis gathers asset valuation information that is beneficial for risk analysis and selection of security controls (it helps avoid putting the ten-dollar lock on the five-dollar bicycle), and criticality information that helps in BC/DR planning by letting the organization understand which systems, data, and personnel are necessary to continuously maintain. However, it does not aid secure acquisition efforts, since the assets examined by the BIA have already been acquired.

asked 18/09/2024
JEAN-MARIE HERMANT
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first