nerdexam
Isaca

CRISC · Question #301

Which of the following analyses is MOST useful for prioritizing risk scenarios associated with loss of IT assets?

The correct answer is B. Business impact analysis (BIA). A Business Impact Analysis (BIA) is the most effective tool for prioritizing risk scenarios by evaluating the potential effects of an incident on business operations.

Submitted by luis.pe· Apr 18, 2026IT Risk Assessment

Question

Which of the following analyses is MOST useful for prioritizing risk scenarios associated with loss of IT assets?

Options

  • ASWOT analysis
  • BBusiness impact analysis (BIA)
  • CCost-benefit analysis
  • DRoot cause analysis

How the community answered

(45 responses)
  • A
    9% (4)
  • B
    73% (33)
  • C
    2% (1)
  • D
    16% (7)

Why each option

A Business Impact Analysis (BIA) is the most effective tool for prioritizing risk scenarios by evaluating the potential effects of an incident on business operations.

ASWOT analysis

SWOT analysis evaluates an organization's strengths, weaknesses, opportunities, and threats, which is a strategic planning tool but not directly used for prioritizing IT asset loss risks.

BBusiness impact analysis (BIA)Correct

A Business Impact Analysis (BIA) systematically identifies and evaluates the potential financial and operational impacts of disruptions to business functions and processes, allowing organizations to prioritize IT assets and their associated risks based on their criticality to business continuity.

CCost-benefit analysis

Cost-benefit analysis evaluates the financial viability of a decision by comparing costs against benefits, which is used for risk treatment decisions, not initial risk prioritization based on impact.

DRoot cause analysis

Root cause analysis focuses on identifying the underlying causes of existing problems or incidents, rather than proactively prioritizing future risk scenarios based on potential impact.

Concept tested: Business Impact Analysis purpose

Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/business-impact-analysis

Topics

#Risk Prioritization#Business Impact Analysis (BIA)#IT Asset Risk#Risk Assessment Tools

Community Discussion

No community discussion yet for this question.

Full CRISC Practice