nerdexam
EC-Council

312-50V11 · Question #64

On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which…

The correct answer is D. Business Impact Analysis (BIA). Business Impact Analysis (BIA) is the formal process used to identify an organization's critical business functions and quantify the potential impact if those functions are disrupted.

Information Security and Ethical Hacking Fundamentals

Question

On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?

Options

  • ARisk Mitigation
  • BEmergency Plan Response (EPR)
  • CDisaster Recovery Planning (DRP)
  • DBusiness Impact Analysis (BIA)

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    3% (1)
  • D
    88% (30)

Why each option

Business Impact Analysis (BIA) is the formal process used to identify an organization's critical business functions and quantify the potential impact if those functions are disrupted.

ARisk Mitigation

Risk mitigation refers to implementing controls to reduce the likelihood or impact of identified risks, not to the discovery and analysis of which business processes are critical.

BEmergency Plan Response (EPR)

Emergency Plan Response (EPR) addresses the immediate reactive actions taken during an active emergency event, not the analytical process of identifying critical processes beforehand.

CDisaster Recovery Planning (DRP)

Disaster Recovery Planning (DRP) focuses on restoring IT systems and infrastructure after a disruptive event; it depends on BIA outputs but does not itself identify critical business processes.

DBusiness Impact Analysis (BIA)Correct

BIA is a core component of business continuity planning defined in standards such as NIST SP 800-34. It systematically identifies which business processes are critical, determines the consequences of their interruption (financial, operational, reputational), and establishes recovery time and recovery point objectives. This directly matches the scenario described - identifying critical processes and their impact when service is interrupted.

Concept tested: Business Impact Analysis in business continuity planning

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#BIA#risk assessment#business continuity#critical processes

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice