nerdexam
(ISC)2

SSCP · Question #532

Which of the following will a Business Impact Analysis NOT identify?

The correct answer is C. The names of individuals to be contacted during a disaster.. A Business Impact Analysis (BIA) identifies critical business functions, their dependencies, and the financial/operational impact of disruptions, but does not specify personnel contact lists for disaster response.

Submitted by khalil_dz· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Which of the following will a Business Impact Analysis NOT identify?

Options

  • AAreas that would suffer the greatest financial or operational loss in the event of a disaster.
  • BSystems critical to the survival of the enterprise.
  • CThe names of individuals to be contacted during a disaster.
  • DThe outage time that can be tolerated by the enterprise as a result of a disaster.

How the community answered

(61 responses)
  • A
    2% (1)
  • B
    8% (5)
  • C
    87% (53)
  • D
    3% (2)

Why each option

A Business Impact Analysis (BIA) identifies critical business functions, their dependencies, and the financial/operational impact of disruptions, but does not specify personnel contact lists for disaster response.

AAreas that would suffer the greatest financial or operational loss in the event of a disaster.

A BIA is specifically designed to identify areas of an organization that would experience the most significant financial or operational losses during an outage, helping prioritize recovery efforts.

BSystems critical to the survival of the enterprise.

Identifying critical systems and processes essential for the enterprise's survival is a core output of a BIA, as these systems underpin the critical business functions.

CThe names of individuals to be contacted during a disaster.Correct

A Business Impact Analysis focuses on assessing the financial and operational consequences of disruptions to business functions and processes, determining critical systems and recovery objectives like RTO/RPO. While the BIA's output informs disaster recovery planning, the specific names and contact details of individuals are typically part of a separate incident response or disaster recovery plan, not the BIA itself.

DThe outage time that can be tolerated by the enterprise as a result of a disaster.

The BIA determines the maximum tolerable downtime (MTD) and recovery time objectives (RTOs) for critical business functions, which directly relates to the outage time that can be tolerated.

Concept tested: Business Impact Analysis (BIA) scope

Source: https://learn.microsoft.com/en-us/azure/architecture/resiliency/business-impact-analysis

Topics

#Business Impact Analysis#Business Continuity#Disaster Recovery#Risk Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice