Which document typically outlines objectives, scope, and deliverables for a BAP engagement?

• A. Contract
• B. Security policy
• C. Engagement letter
• D. NDA

Answer: (C)

An engagement letter is the document that defines the objectives, scope, and deliverables of a BAP engagement. It lays out what the work aims to achieve, the boundaries of what will and won’t be included, and what will be delivered and by when. This kind of letter also typically covers who is responsible for what, the assumptions, and the basic terms of the engagement, so both client and practitioner share a clear understanding before any work begins.

A contract, while it may underpin the engagement, covers broader legal terms, such as payment, liability, and general obligations, and isn’t focused on the day-to-day scope and outputs of the project. A security policy describes required security practices and controls, not a specific project’s objectives or deliverables. An NDA centers on confidentiality and does not define the work to be performed. So the engagement letter is the best fit for outlining what will be achieved, the scope of work, and the concrete deliverables.