nerdexam
Isaca

CISA · Question #238

Which of the following provides the MOST useful information for performing a business impact analysis (BIA)?

The correct answer is B. Inventory of relevant business processes. The most useful information for performing a Business Impact Analysis (BIA) is a comprehensive inventory of relevant business processes.

Submitted by tyler.j· Apr 18, 2026Information Systems Operations and Business Resilience

Question

Which of the following provides the MOST useful information for performing a business impact analysis (BIA)?

Options

  • APolicies for business procurement
  • BInventory of relevant business processes
  • CResults of business resumption planning efforts
  • DDocumentation of application configurations

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    87% (48)
  • C
    7% (4)
  • D
    2% (1)

Why each option

The most useful information for performing a Business Impact Analysis (BIA) is a comprehensive inventory of relevant business processes.

APolicies for business procurement

Policies for business procurement are related to how an organization acquires goods and services, which is generally not the direct subject of a BIA focused on critical business functions and their recovery.

BInventory of relevant business processesCorrect

A comprehensive inventory of relevant business processes is crucial for a Business Impact Analysis (BIA) because the BIA's primary goal is to identify and assess the impact of disruption to these processes. Understanding each process, its dependencies, critical functions, and required resources allows for a thorough evaluation of potential financial, operational, and reputational losses.

CResults of business resumption planning efforts

Results of business resumption planning efforts come after a BIA; the BIA informs resumption planning, not the other way around.

DDocumentation of application configurations

Documentation of application configurations is too granular; while applications support business processes, the BIA needs a higher-level view of the processes themselves to determine their criticality.

Concept tested: Business continuity planning, Business Impact Analysis (BIA), process identification

Source: https://learn.microsoft.com/en-us/compliance/regulatory/auditing-business-impact-analysis

Topics

#Business Impact Analysis#Business Continuity Planning#Business Resilience#Business Processes

Community Discussion

No community discussion yet for this question.

Full CISA Practice