nerdexam
Isaca

CISM · Question #250

The PRIMARY purpose of conducting a business impact analysis (BIA) is to determine the:

The correct answer is B. resources needed for business recovery.. The primary purpose of a Business Impact Analysis (BIA) is to identify critical business processes and determine the minimum resources (people, systems, data, facilities) required to recover and sustain them after a disruption. The BCP scope (A) and RTO (C) are outputs that are d

Submitted by noor.lb· Apr 18, 2026Information Security Program Development and Management

Question

The PRIMARY purpose of conducting a business impact analysis (BIA) is to determine the:

Options

  • Ascope of the business continuity program.
  • Bresources needed for business recovery.
  • Crecovery time objective (RTO).
  • Dscope of the incident response plan.

How the community answered

(28 responses)
  • B
    93% (26)
  • C
    4% (1)
  • D
    4% (1)

Explanation

The primary purpose of a Business Impact Analysis (BIA) is to identify critical business processes and determine the minimum resources (people, systems, data, facilities) required to recover and sustain them after a disruption. The BCP scope (A) and RTO (C) are outputs that are derived from the BIA, not its primary purpose. The incident response plan scope (D) is a separate planning artifact. Understanding recovery resource requirements is what makes the BIA foundational to all continuity planning - everything else flows from that resource-and-impact baseline.

Topics

#Business Impact Analysis (BIA)#Business Continuity Planning (BCP)#Disaster Recovery (DR)#Recovery Resources

Community Discussion

No community discussion yet for this question.

Full CISM Practice