nerdexam
(ISC)2

HCISPP · Question #15

All of the following items should be included in a Business Impact Analysis (BIA) Question:naire EXCEPT Question:s that

The correct answer is B. determine the technological dependence of the business processes. Note: There appears to be an error in the provided answer key. Based on standard BIA doctrine, the correct answer is A, not B. A BIA questionnaire is designed to analyze the consequences of a business interruption - not to assess the probability or risk of one occurring…

Risk Management and Risk Assessment

Question

All of the following items should be included in a Business Impact Analysis (BIA) Question:naire EXCEPT Question:s that

Options

  • Adetermine the risk of a business interruption occurring
  • Bdetermine the technological dependence of the business processes
  • CIdentify the operational impacts of a business interruption
  • DIdentify the financial impacts of a business interruption

How the community answered

(38 responses)
  • A
    16% (6)
  • B
    74% (28)
  • C
    8% (3)
  • D
    3% (1)

Explanation

Note: There appears to be an error in the provided answer key. Based on standard BIA doctrine, the correct answer is A, not B.

A BIA questionnaire is designed to analyze the consequences of a business interruption - not to assess the probability or risk of one occurring. Determining whether an interruption is likely to happen is the job of a Risk Assessment, a separate process that precedes the BIA. Options C (operational impacts) and D (financial impacts) are core BIA outputs - the questionnaire must capture both. Option B (technological dependencies) is also a legitimate BIA component, since understanding which systems each process relies on is essential for calculating recovery requirements.

Memory tip: Think of BIA as answering "What happens if we go down?" - not "How likely are we to go down?" Likelihood/probability = Risk Assessment; Impact/consequence = BIA. If a question is about risk of occurrence, it belongs in Risk Assessment, not BIA.


Summary table:

OptionBelongs in BIA?Why
ANo - this is the exceptionRisk of occurrence = Risk Assessment scope
BYesTech dependencies inform RTO/RPO calculations
CYesOperational impact is a primary BIA output
DYesFinancial impact is a primary BIA output

If your source material marks B as correct, I'd recommend verifying against your study guide - this may be a transcription error in the question.

Topics

#Business Impact Analysis#Business Continuity Planning#Risk Assessment#Disaster Recovery

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice