nerdexam
Isaca

CISA · Question #157

When drafting a disaster recovery strategy, what should be the MOST important outcome of a business impact analysis (BIA)?

The correct answer is B. Determining recovery priorities. While establishing RPOs, RTOs, and determining recovery costs are all critical components of the disaster recovery planning process, the primary goal of a BIA is to identify and prioritize the business functions and processes that must be restored after a disruption. This helps…

Submitted by viktor_hu· Apr 18, 2026Information Systems Operations and Business Resilience

Question

When drafting a disaster recovery strategy, what should be the MOST important outcome of a business impact analysis (BIA)?

Options

  • AEstablishing recovery point objectives (RPOs)
  • BDetermining recovery priorities
  • CEstablishing recovery time objectives (RTOs)
  • DDetermining recovery costs

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    93% (28)
  • C
    3% (1)

Explanation

While establishing RPOs, RTOs, and determining recovery costs are all critical components of the disaster recovery planning process, the primary goal of a BIA is to identify and prioritize the business functions and processes that must be restored after a disruption. This helps ensure that resources are allocated to the most critical areas that have the highest impact on the organization's ability to function. Once these priorities are clear, you can then set appropriate RPOs, RTOs, and plan for recovery costs accordingly.

Topics

#Business Impact Analysis (BIA)#Disaster Recovery Planning#Recovery Priorities#Business Resilience

Community Discussion

No community discussion yet for this question.

Full CISA Practice