nerdexam
(ISC)2

CCSP · Question #6

Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:

The correct answer is D. The cloud provider's resellers. When reviewing a Business Impact Analysis (BIA) post-cloud migration, an organization must consider dependencies related to the cloud provider's operational chain, such as suppliers, vendors, and utilities, but not their resellers.

Submitted by haruto_sh· Apr 18, 2026Legal, Risk and Compliance

Question

Each of the following are dependencies that must be considered when reviewing the BIA after cloud migration except:

Options

  • AThe cloud provider's suppliers
  • BThe cloud provider's vendors
  • CThe cloud provider's utilities
  • DThe cloud provider's resellers

How the community answered

(38 responses)
  • A
    11% (4)
  • B
    3% (1)
  • C
    8% (3)
  • D
    79% (30)

Why each option

When reviewing a Business Impact Analysis (BIA) post-cloud migration, an organization must consider dependencies related to the cloud provider's operational chain, such as suppliers, vendors, and utilities, but not their resellers.

AThe cloud provider's suppliers

The cloud provider's suppliers provide essential components or services (e.g., hardware, software licenses) that are critical to the cloud provider's ability to deliver services.

BThe cloud provider's vendors

The cloud provider's vendors are external entities that provide goods or services to the cloud provider, impacting their operational capabilities, similar to suppliers.

CThe cloud provider's utilities

The cloud provider's utilities (e.g., power, internet connectivity, cooling) are fundamental infrastructure elements whose failure would directly impact the availability of cloud services.

DThe cloud provider's resellersCorrect

The cloud provider's resellers typically handle sales and licensing but are not direct operational dependencies affecting the core delivery of services or the continuity of operations for which a BIA is concerned. Their failure would not directly impact the availability or integrity of the cloud services used by the customer.

Concept tested: Cloud BIA dependencies

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#Business Impact Analysis#Cloud Provider Dependencies#Risk Management#Business Continuity

Community Discussion

No community discussion yet for this question.

Full CCSP Practice