CCSP · Question #6
Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:
The correct answer is D. The cloud provider's resellers. When reviewing a Business Impact Analysis (BIA) post-cloud migration, an organization must consider dependencies related to the cloud provider's operational chain, such as suppliers, vendors, and utilities, but not their resellers.
Question
Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:
Options
- AThe cloud provider's suppliers
- BThe cloud provider's vendors
- CThe cloud provider's utilities
- DThe cloud provider's resellers
How the community answered
(38 responses)- A11% (4)
- B3% (1)
- C8% (3)
- D79% (30)
Why each option
When reviewing a Business Impact Analysis (BIA) post-cloud migration, an organization must consider dependencies related to the cloud provider's operational chain, such as suppliers, vendors, and utilities, but not their resellers.
The cloud provider's suppliers provide essential components or services (e.g., hardware, software licenses) that are critical to the cloud provider's ability to deliver services.
The cloud provider's vendors are external entities that provide goods or services to the cloud provider, impacting their operational capabilities, similar to suppliers.
The cloud provider's utilities (e.g., power, internet connectivity, cooling) are fundamental infrastructure elements whose failure would directly impact the availability of cloud services.
The cloud provider's resellers typically handle sales and licensing but are not direct operational dependencies affecting the core delivery of services or the continuity of operations for which a BIA is concerned. Their failure would not directly impact the availability or integrity of the cloud services used by the customer.
Concept tested: Cloud BIA dependencies
Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.