nerdexam
(ISC)2

CCSP · Question #770

The BIA can be used to provide information about all the following, except:

The correct answer is C. Secure acquisition. The business impact analysis gathers asset valuation information that is beneficial for risk analysis and selection of security controls (it helps avoid putting the ten-dollar lock on the five- dollar bicycle), and criticality information that helps in BC/DR planning by letting t

Submitted by miguelv· Apr 18, 2026Legal, Risk and Compliance

Question

The BIA can be used to provide information about all the following, except:

Options

  • ABC/DR planning
  • BRisk analysis
  • CSecure acquisition
  • DSelection of security controls

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    87% (27)
  • D
    6% (2)

Explanation

The business impact analysis gathers asset valuation information that is beneficial for risk analysis and selection of security controls (it helps avoid putting the ten-dollar lock on the five- dollar bicycle), and criticality information that helps in BC/DR planning by letting the organization understand which systems, data, and personnel are necessary to continuously maintain. However, it does not aid secure acquisition efforts, since the assets examined by the BIA have already been acquired.

Topics

#Business Impact Analysis#Risk Management#Business Continuity#Disaster Recovery

Community Discussion

No community discussion yet for this question.

Full CCSP Practice