exam questions

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 454 discussion

Actual exam question from ISC's CCSP
Question #: 454
Topic #: 1
[All CCSP Questions]

When reviewing the BIA after a cloud migration, the organization should take into account new factors related to data breach impacts. One of these new factors is:

  • A. Many states have data breach notification laws.
  • B. Breaches can cause the loss of proprietary data.
  • C. Breaches can cause the loss of intellectual property.
  • D. Legal liability can't be transferred to the cloud provider.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
State notification laws and the loss of proprietary data/intellectual property pre-existed the cloud; only the lack of ability to transfer liability is new.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MaciekMT
1 month, 3 weeks ago
Selected Answer: A
Why Not the Others? B. Breaches can cause the loss of proprietary data. → This is a concern in any environment, not a new factor unique to the cloud. C. Breaches can cause the loss of intellectual property. → Similar to B, this is a general risk, not specific to cloud migration. D. Legal liability can't be transferred to the cloud provider. → While true in most cases, cloud contracts can define liability limits, making this a contractual issue rather than a direct BIA factor.
upvoted 1 times
...
MaciekMT
1 month, 3 weeks ago
Selected Answer: A
After migrating to the cloud, organizations must update their Business Impact Analysis (BIA) to consider new compliance and regulatory risks, particularly data breach notification laws. 🔹 Why Are Data Breach Notification Laws Important in the Cloud? Many U.S. states and international jurisdictions (e.g., GDPR, CCPA) require organizations to notify affected individuals and regulators in the event of a breach. Cloud environments introduce shared security responsibilities, making compliance with data breach notification timelines and processes more complex. Failure to comply can result in legal penalties, reputational damage, and financial losses.
upvoted 1 times
...
akg001
4 months, 4 weeks ago
Selected Answer: D
D. Legal liability can't be transferred to the cloud provider.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago