HCISPP · Question #15
All of the following items should be included in a Business Impact Analysis (BIA) Question:naire EXCEPT Question:s that
The correct answer is B. determine the technological dependence of the business processes. Note: There appears to be an error in the provided answer key. Based on standard BIA doctrine, the correct answer is A, not B. A BIA questionnaire is designed to analyze the consequences of a business interruption - not to assess the probability or risk of one occurring…
Question
All of the following items should be included in a Business Impact Analysis (BIA) Question:naire EXCEPT Question:s that
Options
- Adetermine the risk of a business interruption occurring
- Bdetermine the technological dependence of the business processes
- CIdentify the operational impacts of a business interruption
- DIdentify the financial impacts of a business interruption
How the community answered
(38 responses)- A16% (6)
- B74% (28)
- C8% (3)
- D3% (1)
Explanation
Note: There appears to be an error in the provided answer key. Based on standard BIA doctrine, the correct answer is A, not B.
A BIA questionnaire is designed to analyze the consequences of a business interruption - not to assess the probability or risk of one occurring. Determining whether an interruption is likely to happen is the job of a Risk Assessment, a separate process that precedes the BIA. Options C (operational impacts) and D (financial impacts) are core BIA outputs - the questionnaire must capture both. Option B (technological dependencies) is also a legitimate BIA component, since understanding which systems each process relies on is essential for calculating recovery requirements.
Memory tip: Think of BIA as answering "What happens if we go down?" - not "How likely are we to go down?" Likelihood/probability = Risk Assessment; Impact/consequence = BIA. If a question is about risk of occurrence, it belongs in Risk Assessment, not BIA.
Summary table:
| Option | Belongs in BIA? | Why |
|---|---|---|
| A | No - this is the exception | Risk of occurrence = Risk Assessment scope |
| B | Yes | Tech dependencies inform RTO/RPO calculations |
| C | Yes | Operational impact is a primary BIA output |
| D | Yes | Financial impact is a primary BIA output |
If your source material marks B as correct, I'd recommend verifying against your study guide - this may be a transcription error in the question.
Topics
Community Discussion
No community discussion yet for this question.