nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #740

What is the primary purpose of a business impact analysis (BIA)?

The correct answer is D. Determining the recovery time objectives (RTO) for critical functions. A Business Impact Analysis (BIA) is a planning process that identifies critical business functions and determines how long the organization can tolerate their disruption. Its primary output includes Recovery Time Objectives (RTO - how quickly a function must be restored) and…

Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR) Concepts

Question

What is the primary purpose of a business impact analysis (BIA)?

Options

  • AEvaluating the potential financial impact of disruptions
  • BIdentifying vulnerabilities in the organization's IT infrastructure
  • CAssessing the likelihood of specific cyber threats
  • DDetermining the recovery time objectives (RTO) for critical functions

How the community answered

(65 responses)
  • A
    3% (2)
  • B
    6% (4)
  • C
    3% (2)
  • D
    88% (57)

Explanation

A Business Impact Analysis (BIA) is a planning process that identifies critical business functions and determines how long the organization can tolerate their disruption. Its primary output includes Recovery Time Objectives (RTO - how quickly a function must be restored) and Recovery Point Objectives (RPO - how much data loss is acceptable). While a BIA may touch on financial impact (A) as part of its analysis, financial assessment is a supporting input, not the primary purpose. Identifying IT vulnerabilities (B) belongs to risk assessments, and evaluating threat likelihood (C) is part of threat modeling.

Topics

#Business Impact Analysis#Recovery Time Objective#Business Continuity

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice