nerdexam
(ISC)2

SSCP · Question #495

Which of the following steps should be one of the first step performed in a Business Impact Analysis (BIA)?

The correct answer is D. Identify and Prioritize Critical Organization Functions. The first step in a BIA is to identify and prioritize critical organizational functions. Before evaluating impacts, estimating RTOs, or identifying business units, you must know which functions are essential to the organization's survival. This foundational step determines the sc

Submitted by khalil_dz· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Which of the following steps should be one of the first step performed in a Business Impact Analysis (BIA)?

Options

  • AIdentify all CRITICAL business units within the organization.
  • BEvaluate the impact of disruptive events.
  • CEstimate the Recovery Time Objectives (RTO).
  • DIdentify and Prioritize Critical Organization Functions

How the community answered

(60 responses)
  • A
    3% (2)
  • B
    2% (1)
  • C
    7% (4)
  • D
    88% (53)

Explanation

The first step in a BIA is to identify and prioritize critical organizational functions. Before evaluating impacts, estimating RTOs, or identifying business units, you must know which functions are essential to the organization's survival. This foundational step determines the scope and direction of the entire BIA - you cannot assess impact or set recovery objectives until you know what needs to be recovered and in what order of importance.

Topics

#Business Impact Analysis (BIA)#Business Continuity Planning (BCP)#Critical Functions#Risk Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice