nerdexam
(ISC)2

CISSP · Question #1299

What is the MAIN purpose of conducting a business impact analysis (BIA)?

The correct answer is B. To determine the effect of mission-critical information system failures on core business processes. The main purpose of conducting a business impact analysis (BIA) is to determine the effect of mission-critical information system failures on core business processes. A BIA is a process that identifies and evaluates the critical business functions and their dependencies, and dete

Submitted by ricky.ec· Mar 5, 2026Security and Risk Management

Question

What is the MAIN purpose of conducting a business impact analysis (BIA)?

Options

  • ATo determine the critical resources required to recover from an incident within a specified time
  • BTo determine the effect of mission-critical information system failures on core business processes
  • CTo determine the cost for restoration of damaged information system
  • DTo determine the controls required to return to business critical operations

How the community answered

(46 responses)
  • A
    7% (3)
  • B
    89% (41)
  • C
    2% (1)
  • D
    2% (1)

Explanation

The main purpose of conducting a business impact analysis (BIA) is to determine the effect of mission-critical information system failures on core business processes. A BIA is a process that identifies and evaluates the critical business functions and their dependencies, and determines the impact of a disruption on them. A BIA helps to quantify the potential loss of revenue, reputation, productivity, or customer satisfaction due to an information system failure, as well as the recovery time and resources needed to resume the normal operations. A BIA does not determine the critical resources required to recover from an incident, as this is the role of a disaster recovery plan or a business continuity plan. A BIA does not determine the cost for restoration of damaged information system, as this is the role of a risk analysis or a cost-benefit analysis. A BIA does not determine the controls required to return to business critical operations, as this is the role of a contingency plan or a crisis management plan.

Topics

#Business Impact Analysis (BIA)#business continuity#risk management

Community Discussion

No community discussion yet for this question.

Full CISSP Practice