Correct Answer: D
The document that specifies services from the client's viewpoint is the Service Level Requirement (SLR).
SLR is a document that defines and describes the expectations and the needs of the client or the customer regarding the services that are provided or delivered by the service provider or the vendor, such as the quality, the availability, the performance, or the cost of the services. SLR specifies services from the client's viewpoint, because it can:
* Identify and communicate the requirements and the objectives of the client or the customer for the services that are provided or delivered by the service provider or the vendor, and ensure that the services are aligned and consistent with the requirements and the objectives of the client or the customer.
* Negotiate and agree on the terms and the conditions of the services that are provided or delivered by the service provider or the vendor, and establish the roles and the responsibilities of the client or the customer and the service provider or the vendor for the services.
* Monitor and measure the performance and the effectiveness of the services that are provided or delivered by the service provider or the vendor, and evaluate the satisfaction and the feedback of the client or the customer for the services.
The other options are not the documents that specify services from the client's viewpoint. Service level report is a document that provides and presents the information and the data about the actual performance and the effectiveness of the services that are provided or delivered by the service provider or the vendor, compared to the agreed or the expected performance and the effectiveness of the services, such as the service level targets or the service level indicators. Service level report does not specify services from the client's viewpoint, but rather reports services from the service provider's viewpoint. Business impact analysis (BIA) is a document that provides and presents the analysis and the assessment of the potential impact and the consequences of the disruption or the interruption of the critical business functions or processes, due to the incidents or the events, such as the disasters, the emergencies, or the threats. BIA does not specify services from the client's viewpoint, but rather analyzes services from the business viewpoint. Service level agreement (SLA) is a document that defines and describes the agreed or the expected performance and the effectiveness of the services that are provided or delivered by the service provider or the vendor, such as the service level targets or the service level indicators, and the remedies or the penalties for the non-compliance or the breach of the performance and the effectiveness of the services. SLA does not specify services from the client's viewpoint, but rather agrees services from the service provider's viewpoint. References: CISSP All-in-One Exam Guide, Eighth Edition, Chapter 7: Security Operations, page 900. Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 7: Security
