CRISC · Question #301
Which of the following analyses is MOST useful for prioritizing risk scenarios associated with loss of IT assets?
The correct answer is B. Business impact analysis (BIA). A Business Impact Analysis (BIA) is the most effective tool for prioritizing risk scenarios by evaluating the potential effects of an incident on business operations.
Question
Which of the following analyses is MOST useful for prioritizing risk scenarios associated with loss of IT assets?
Options
- ASWOT analysis
- BBusiness impact analysis (BIA)
- CCost-benefit analysis
- DRoot cause analysis
How the community answered
(45 responses)- A9% (4)
- B73% (33)
- C2% (1)
- D16% (7)
Why each option
A Business Impact Analysis (BIA) is the most effective tool for prioritizing risk scenarios by evaluating the potential effects of an incident on business operations.
SWOT analysis evaluates an organization's strengths, weaknesses, opportunities, and threats, which is a strategic planning tool but not directly used for prioritizing IT asset loss risks.
A Business Impact Analysis (BIA) systematically identifies and evaluates the potential financial and operational impacts of disruptions to business functions and processes, allowing organizations to prioritize IT assets and their associated risks based on their criticality to business continuity.
Cost-benefit analysis evaluates the financial viability of a decision by comparing costs against benefits, which is used for risk treatment decisions, not initial risk prioritization based on impact.
Root cause analysis focuses on identifying the underlying causes of existing problems or incidents, rather than proactively prioritizing future risk scenarios based on potential impact.
Concept tested: Business Impact Analysis purpose
Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/business-impact-analysis
Topics
Community Discussion
No community discussion yet for this question.