Which of the following is the PRIMARY goal of a business impact analysis (BIA)?

The correct answer is D. Enabling criticality prioritization. The primary purpose of a BIA is to identify and prioritize critical business functions and the resources they depend on, so that recovery efforts can be directed to what matters most - enabling criticality prioritization (D). The BIA answers: which processes are most critical…

Submitted by anna_se· Apr 18, 2026Information Risk Management

Question

Options

AInforming vendor and technology selections
BEnhancing system availability and resiliency
CMeeting compliance requirements
DEnabling criticality prioritization

How the community answered

(32 responses)

A
3% (1)
C
3% (1)
D
94% (30)

Explanation

The primary purpose of a BIA is to identify and prioritize critical business functions and the resources they depend on, so that recovery efforts can be directed to what matters most - enabling criticality prioritization (D). The BIA answers: which processes are most critical, what are the maximum tolerable downtime and recovery time objectives, and what are the impacts of disruption? Informing vendor/technology selections (A) and enhancing resiliency (B) are downstream activities informed by BIA findings. Meeting compliance requirements (C) may be a driver for conducting a BIA, but it is not the BIA's primary goal.

Topics

#Business Impact Analysis (BIA)#Criticality Prioritization#Business Continuity Planning (BCP)#Disaster Recovery Planning (DRP)

Community Discussion

No community discussion yet for this question.

Full CISM Practice