nerdexam
Isaca

CRISC · Question #9

As pan of business continuity planning, which of the following is MOST important to include m a business impact analysis (BlA)?

The correct answer is A. An assessment of threats to the organization. An assessment of threats to the organization is most important to include in a Business Impact Analysis (BIA) because understanding potential disruptive events is fundamental to identifying and quantifying their impacts.

Submitted by alyssa_d· Apr 18, 2026IT Risk Assessment

Question

As pan of business continuity planning, which of the following is MOST important to include m a business impact analysis (BlA)?

Options

  • AAn assessment of threats to the organization
  • BAn assessment of recovery scenarios
  • Cindustry standard framework
  • DDocumentation of testing procedures

How the community answered

(24 responses)
  • A
    88% (21)
  • B
    8% (2)
  • C
    4% (1)

Why each option

An assessment of threats to the organization is most important to include in a Business Impact Analysis (BIA) because understanding potential disruptive events is fundamental to identifying and quantifying their impacts.

AAn assessment of threats to the organizationCorrect

A Business Impact Analysis (BIA) primarily identifies critical business functions and quantifies the potential financial and operational impacts of disruptions. To achieve this, it must inherently assess the various threats (e.g., cyberattacks, natural disasters, equipment failures) that could cause such disruptions, linking them to specific assets and processes.

BAn assessment of recovery scenarios

An assessment of recovery scenarios is a subsequent step in developing the Business Continuity Plan (BCP), which occurs after the BIA has identified the critical functions and their recovery priorities.

Cindustry standard framework

While using an industry standard framework can guide the BIA process, the framework itself is a methodology, not a direct component that is *included* within the BIA document's content.

DDocumentation of testing procedures

Documentation of testing procedures is part of the overall Business Continuity Management program and is used to validate the BCP's effectiveness, which follows the BIA phase.

Concept tested: Business Impact Analysis (BIA) scope

Source: https://learn.microsoft.com/en-us/azure/reliability/business-impact-analysis-template

Topics

#Business Impact Analysis#Business Continuity Planning#Threat Assessment#Risk Assessment

Community Discussion

No community discussion yet for this question.

Full CRISC Practice