nerdexam
(ISC)2

CISSP · Question #586

Physical assets defined in an organization's Business Impact Analysis (BIA) could include which of the following?

The correct answer is B. Supplies kept off-site at a remote facility. A Business Impact Analysis (BIA) inventories organizational assets to assess the impact of disruptions; physical assets are tangible items owned or controlled by the organization, including supplies stored at remote or off-site facilities.

Submitted by lucia.co· Mar 5, 2026Asset Security

Question

Physical assets defined in an organization's Business Impact Analysis (BIA) could include which of the following?

Options

  • APersonal belongings of organizational staff members
  • BSupplies kept off-site at a remote facility
  • CCloud-based applications
  • DDisaster Recovery (DR) line-item revenues

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    90% (35)
  • C
    3% (1)
  • D
    5% (2)

Why each option

A Business Impact Analysis (BIA) inventories organizational assets to assess the impact of disruptions; physical assets are tangible items owned or controlled by the organization, including supplies stored at remote or off-site facilities.

APersonal belongings of organizational staff members

Personal belongings of staff members are privately owned property and are not organizational assets, so they fall outside the scope of a BIA which focuses on assets owned or controlled by the organization.

BSupplies kept off-site at a remote facilityCorrect

Supplies kept off-site at a remote facility are tangible, organization-owned physical assets that must be accounted for in a BIA because their loss or inaccessibility would directly impact business operations. Off-site storage locations are explicitly within scope of BIA physical asset inventories because the organization bears responsibility for those resources. Including them ensures recovery time and recovery point objectives account for any disruption to those materials.

CCloud-based applications

Cloud-based applications are logical/virtual assets, not physical assets; they would be categorized as software or IT service assets within the BIA.

DDisaster Recovery (DR) line-item revenues

Disaster Recovery line-item revenues are a financial metric or projected cost figure used in business case justification, not a physical asset that can be inventoried in a BIA.

Concept tested: BIA physical asset identification and scoping

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#Business Impact Analysis (BIA)#Asset types#Physical assets

Community Discussion

No community discussion yet for this question.

Full CISSP Practice