Certified Cloud Security Professional (CCSP) — Question 415

The BIA can be used to provide information about all the following, except:

Answer options

• A. BC/DR planning
• B. Risk analysis
• C. Secure acquisition
• D. Selection of security controls

Correct answer: C

Explanation

The BIA is primarily focused on understanding the impact of disruptions on business operations, which informs BC/DR planning, risk analysis, and selection of security controls. However, it does not directly address the aspects related to secure acquisition, making option C the correct answer.