nerdexam
(ISC)2

CGRC · Question #661

An analysis of an information system's requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant disruption…

The correct answer is A. Business Impact Analysis (BIA). A Business Impact Analysis (BIA) analyzes an information system's requirements, functions, and interdependencies to characterize contingency requirements and priorities during a disruption.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

An analysis of an information system's requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant disruption. Response:

Options

  • ABusiness Impact Analysis (BIA)
  • BBusiness Continuity Plan (BCP)
  • CBusiness Recovery/Disruption Plan (BRP)
  • DDisaster Recovery Plan (DRP)

How the community answered

(27 responses)
  • A
    93% (25)
  • C
    4% (1)
  • D
    4% (1)

Why each option

A Business Impact Analysis (BIA) analyzes an information system's requirements, functions, and interdependencies to characterize contingency requirements and priorities during a disruption.

ABusiness Impact Analysis (BIA)Correct

A Business Impact Analysis (BIA) systematically identifies and evaluates the potential effects of a business disruption, detailing critical functions, system requirements, interdependencies, and recovery priorities to inform contingency planning.

BBusiness Continuity Plan (BCP)

A Business Continuity Plan (BCP) is a comprehensive plan that outlines how an organization will continue operations during and after a disruption, using the output of a BIA.

CBusiness Recovery/Disruption Plan (BRP)

A Business Recovery/Disruption Plan (BRP) is a general term often encompassing BCP or DRP, but the BIA is the specific analytical process described.

DDisaster Recovery Plan (DRP)

A Disaster Recovery Plan (DRP) specifically focuses on the recovery of IT systems and infrastructure following a disaster, which is guided by the information gathered in a BIA.

Concept tested: Business Impact Analysis (BIA) definition

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#Business Impact Analysis (BIA)#Contingency Planning#Risk Management#Business Continuity

Community Discussion

No community discussion yet for this question.

Full CGRC Practice