CAS-001 · Question #214
The Chief Executive Officer (CEO) has decided to outsource systems which are not core business functions; however, a recent review by the risk officer has indicated that core business functions are…
The correct answer is A. Business impact analysis. A Business Impact Analysis (BIA) is the correct tool because it systematically identifies all business functions and their dependencies, quantifies the operational and financial impact of disruption, and produces prioritized Recovery Time Objectives (RTOs) and Recovery Point…
Question
The Chief Executive Officer (CEO) has decided to outsource systems which are not core business functions; however, a recent review by the risk officer has indicated that core business functions are dependent on the outsourced systems. The risk officer has requested that the IT department calculates the priority of restoration for all systems and applications under the new business model. Which of the following is the BEST tool to achieve this?
Options
- ABusiness impact analysis
- BAnnualized loss expectancy analysis
- CTCO analysis
- DResidual risk and gap analysis
How the community answered
(52 responses)- A79% (41)
- B12% (6)
- C4% (2)
- D6% (3)
Explanation
A Business Impact Analysis (BIA) is the correct tool because it systematically identifies all business functions and their dependencies, quantifies the operational and financial impact of disruption, and produces prioritized Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs). This directly answers the question of which systems to restore first. ALE analysis (B) focuses on financial loss from threats. TCO analysis (C) addresses total cost of ownership. Residual risk and gap analysis (D) identifies remaining risk after controls - none of these establish restoration priority the way a BIA does.
Topics
Community Discussion
No community discussion yet for this question.