Which of the following is the BEST resource for determining the priority of applications to recover?

The correct answer is C. Business impact analysis (BIA). A BIA directly maps business processes to their supporting systems and quantifies the impact of downtime on operations, revenue, and compliance. It produces Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs), which are the definitive basis for recovery…

Submitted by alyssa_d· Apr 18, 2026Information Security Program Development and Management

Question

Options

ACost-benefit analysis
BRisk assessment
CBusiness impact analysis (BIA)
DIncident response plan

How the community answered

(28 responses)

A
7% (2)
B
4% (1)
C
89% (25)

Explanation

A BIA directly maps business processes to their supporting systems and quantifies the impact of downtime on operations, revenue, and compliance. It produces Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs), which are the definitive basis for recovery prioritization. A risk assessment addresses threat likelihood, a cost-benefit analysis evaluates financial trade-offs, and an incident response plan guides breach handling - none of them specifically rank application criticality for recovery.

Topics

#Business Impact Analysis (BIA)#Disaster Recovery Planning#Business Continuity Planning#Recovery Prioritization

Community Discussion

No community discussion yet for this question.

Full CISM Practice