CRISC · Question #152
Which of the following is the MOST important outcome of a business impact analysis (BIA)?
The correct answer is A. Understanding and prioritization of critical processes. The most important outcome of a business impact analysis (BIA) is identifying and prioritizing an organization's critical business processes and their recovery requirements.
Question
Which of the following is the MOST important outcome of a business impact analysis (BIA)?
Options
- AUnderstanding and prioritization of critical processes
- BCompletion of the business continuity plan (BCP)
- CIdentification of regulatory consequences
- DReduction of security and business continuity threats
How the community answered
(18 responses)- A94% (17)
- C6% (1)
Why each option
The most important outcome of a business impact analysis (BIA) is identifying and prioritizing an organization's critical business processes and their recovery requirements.
A BIA systematically identifies critical business functions, assesses the potential impact of their disruption, and determines the necessary recovery time objectives (RTOs) and recovery point objectives (RPOs). This understanding and prioritization are crucial for developing effective business continuity and disaster recovery plans.
Completion of the business continuity plan (BCP) is the subsequent goal informed by the BIA, not an outcome of the BIA itself.
While a BIA may reveal regulatory non-compliance impacts, its primary focus is on operational and financial impacts to prioritize recovery, making this a secondary outcome.
A BIA helps in understanding impacts and recovery needs but does not directly reduce threats; threat reduction is achieved through risk mitigation strategies and controls developed *after* the BIA.
Concept tested: Business Impact Analysis (BIA) purpose
Source: https://www.nist.gov/privacy-framework/nist-sp-800-34-rev1-contingency-planning-federal-information-systems
Topics
Community Discussion
No community discussion yet for this question.