SK0-004 · Question #398
An outside contractor is hired to perform a business impact analysis of a simulated disaster. The contractor asks stakeholders what they think a hurricane would do to the business. This is an…
The correct answer is B. the question is subjective and does not represent a complete business impact analysis. A valid business impact analysis must use structured, quantitative data collection rather than subjective stakeholder opinions to accurately measure the financial and operational effects of a disaster scenario.
Question
An outside contractor is hired to perform a business impact analysis of a simulated disaster. The contractor asks stakeholders what they think a hurricane would do to the business. This is an inadequate method because:
Options
- Athe question is related to disaster recovery, not impact analysis
- Bthe question is subjective and does not represent a complete business impact analysis
- Cit is impossible to perform an impact of anything simulated
- Dhurricanes vary in intensity, so the business impact is always unknown
How the community answered
(46 responses)- A4% (2)
- B61% (28)
- C24% (11)
- D11% (5)
Why each option
A valid business impact analysis must use structured, quantitative data collection rather than subjective stakeholder opinions to accurately measure the financial and operational effects of a disaster scenario.
A business impact analysis specifically evaluates the operational and financial effects of disruptive events, which directly includes natural disaster scenarios; it is not limited to post-disaster recovery procedures.
Asking stakeholders what they 'think' a hurricane would do relies on personal perception rather than measurable metrics such as revenue loss per outage hour, recovery time objectives (RTO), recovery point objectives (RPO), and dependency mapping. A complete BIA requires systematic data gathering and financial modeling to produce actionable, defensible results that guide continuity planning decisions.
Using hypothetical or simulated disaster scenarios is a standard, accepted component of BIA methodology, allowing organizations to model potential impacts before a real event occurs.
Variable storm intensity does not invalidate impact analysis; BIA frameworks use scenario ranges and probability-weighted modeling to account for varying severity levels within the same disaster type.
Concept tested: Business impact analysis methodology and data objectivity
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf
Topics
Community Discussion
No community discussion yet for this question.