nerdexam
EC-Council

312-50V10 · Question #64

On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which…

The correct answer is D. Business Impact Analysis (BIA). Business Impact Analysis (BIA) is the process used to identify critical business functions and quantify the impact of their disruption on the organization.

Information Security and Ethical Hacking Fundamentals

Question

On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?

Options

  • ARisk Mitigation
  • BEmergency Plan Response (EPR)
  • CDisaster Recovery Planning (DRP)
  • DBusiness Impact Analysis (BIA)

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    95% (35)

Why each option

Business Impact Analysis (BIA) is the process used to identify critical business functions and quantify the impact of their disruption on the organization.

ARisk Mitigation

Risk Mitigation refers to implementing controls to reduce the likelihood or impact of identified risks, not to identifying which business processes are critical.

BEmergency Plan Response (EPR)

Emergency Plan Response (EPR) is not a recognized standard term in business continuity management and does not describe the process of identifying critical business processes.

CDisaster Recovery Planning (DRP)

Disaster Recovery Planning (DRP) focuses on restoring IT systems and infrastructure after a disaster and is typically a downstream activity that uses BIA findings as its input.

DBusiness Impact Analysis (BIA)Correct

A Business Impact Analysis (BIA) systematically evaluates each business process to determine which are critical, what resources they depend on, and what financial or operational damage results if they are interrupted. It produces key recovery metrics such as Recovery Time Objective (RTO) and Recovery Point Objective (RPO) that drive continuity planning. BIA is specifically the process of identifying and prioritizing critical processes before other planning activities such as DRP can be designed.

Concept tested: Business Impact Analysis identifying critical business processes

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#Business Impact Analysis#risk assessment#BIA#business continuity

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice