312-50V10 · Question #64
On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which…
The correct answer is D. Business Impact Analysis (BIA). Business Impact Analysis (BIA) is the process used to identify critical business functions and quantify the impact of their disruption on the organization.
Question
On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?
Options
- ARisk Mitigation
- BEmergency Plan Response (EPR)
- CDisaster Recovery Planning (DRP)
- DBusiness Impact Analysis (BIA)
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- D95% (35)
Why each option
Business Impact Analysis (BIA) is the process used to identify critical business functions and quantify the impact of their disruption on the organization.
Risk Mitigation refers to implementing controls to reduce the likelihood or impact of identified risks, not to identifying which business processes are critical.
Emergency Plan Response (EPR) is not a recognized standard term in business continuity management and does not describe the process of identifying critical business processes.
Disaster Recovery Planning (DRP) focuses on restoring IT systems and infrastructure after a disaster and is typically a downstream activity that uses BIA findings as its input.
A Business Impact Analysis (BIA) systematically evaluates each business process to determine which are critical, what resources they depend on, and what financial or operational damage results if they are interrupted. It produces key recovery metrics such as Recovery Time Objective (RTO) and Recovery Point Objective (RPO) that drive continuity planning. BIA is specifically the process of identifying and prioritizing critical processes before other planning activities such as DRP can be designed.
Concept tested: Business Impact Analysis identifying critical business processes
Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.