nerdexam
Isaca

CISM · Question #52

A business impact analysis (BIA) BEST enables an organization to establish:

The correct answer is C. restoration priorities. A business impact analysis (BIA) primarily enables an organization to establish restoration priorities by identifying critical business functions and their recovery requirements.

Submitted by haru.x· Apr 18, 2026Information Security Risk Management

Question

A business impact analysis (BIA) BEST enables an organization to establish:

Options

  • Aannualized loss expectancy (ALE).
  • Brecovery methods.
  • Crestoration priorities.
  • Dtotal cost of ownership (TCO).

How the community answered

(56 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    88% (49)
  • D
    7% (4)

Why each option

A business impact analysis (BIA) primarily enables an organization to establish restoration priorities by identifying critical business functions and their recovery requirements.

Aannualized loss expectancy (ALE).

Annualized Loss Expectancy (ALE) is a metric used in risk assessment to quantify financial risk over a year, which is a different focus from a BIA's purpose of identifying operational impacts and recovery needs.

Brecovery methods.

While a BIA informs *what* needs to be recovered and *how quickly*, it does not define the detailed technical *recovery methods*; those are developed during business continuity and disaster recovery planning.

Crestoration priorities.Correct

A Business Impact Analysis (BIA) systematically identifies and evaluates the potential effects of business disruption on an organization's critical functions and processes. By determining the impact tolerance, recovery time objectives (RTO), and recovery point objectives (RPO) for each critical asset, the BIA provides the necessary information to establish the order in which systems and services must be restored following an incident.

Dtotal cost of ownership (TCO).

Total Cost of Ownership (TCO) is a financial estimate of all direct and indirect costs associated with an asset or system over its lifecycle, which is unrelated to the operational impact analysis performed by a BIA.

Concept tested: BIA for business continuity

Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/business-continuity-management

Topics

#Business Impact Analysis#Business Continuity#Recovery Planning#Restoration Priorities

Community Discussion

No community discussion yet for this question.

Full CISM Practice