312-50V11 · Question #64
On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which…
The correct answer is D. Business Impact Analysis (BIA). Business Impact Analysis (BIA) is the formal process used to identify an organization's critical business functions and quantify the potential impact if those functions are disrupted.
Question
On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?
Options
- ARisk Mitigation
- BEmergency Plan Response (EPR)
- CDisaster Recovery Planning (DRP)
- DBusiness Impact Analysis (BIA)
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C3% (1)
- D88% (30)
Why each option
Business Impact Analysis (BIA) is the formal process used to identify an organization's critical business functions and quantify the potential impact if those functions are disrupted.
Risk mitigation refers to implementing controls to reduce the likelihood or impact of identified risks, not to the discovery and analysis of which business processes are critical.
Emergency Plan Response (EPR) addresses the immediate reactive actions taken during an active emergency event, not the analytical process of identifying critical processes beforehand.
Disaster Recovery Planning (DRP) focuses on restoring IT systems and infrastructure after a disruptive event; it depends on BIA outputs but does not itself identify critical business processes.
BIA is a core component of business continuity planning defined in standards such as NIST SP 800-34. It systematically identifies which business processes are critical, determines the consequences of their interruption (financial, operational, reputational), and establishes recovery time and recovery point objectives. This directly matches the scenario described - identifying critical processes and their impact when service is interrupted.
Concept tested: Business Impact Analysis in business continuity planning
Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.