Which of the following BEST enables an organization to determine the costs of downtime for a critical application?

The correct answer is A. Business impact analysis (BIA). A Business Impact Analysis (BIA) is specifically designed to quantify the financial, operational, and reputational consequences of an application outage over time. It produces concrete figures such as lost revenue per hour, regulatory penalties, and SLA breach costs. ROI…

Submitted by javi_es· Apr 18, 2026Information Security Risk Management

Question

Options

ABusiness impact analysis (BIA)
BReturn on investment (ROI) analysis
CFault tree analysis
DCost-benefit analysis

How the community answered

(36 responses)

A
92% (33)
B
6% (2)
C
3% (1)

Explanation

A Business Impact Analysis (BIA) is specifically designed to quantify the financial, operational, and reputational consequences of an application outage over time. It produces concrete figures such as lost revenue per hour, regulatory penalties, and SLA breach costs. ROI analysis (B) evaluates investment returns, fault tree analysis (C) identifies failure paths and causes, and cost-benefit analysis (D) compares options - none of these directly measure what downtime itself costs the organization the way a BIA does.

Topics

#Business Impact Analysis (BIA)#Downtime costs#Criticality assessment#Business Continuity

Community Discussion

No community discussion yet for this question.

Full CISM Practice