SY0-301 · Question #716
A company's chief information officer (CIO) has analyzed the financial loss associated with the company's database breach. They calculated that one single breach could cost the company $1,000,000 at…
The correct answer is D. Business impact analysis. A Business Impact Analysis (BIA) is the document used to quantify the financial and operational consequences of a security incident or breach.
Question
A company's chief information officer (CIO) has analyzed the financial loss associated with the company's database breach. They calculated that one single breach could cost the company $1,000,000 at a minimum. Which of the following documents is the CIO MOST likely updating?
Options
- ASuccession plan
- BContinuity of operation plan
- CDisaster recovery plan
- DBusiness impact analysis
How the community answered
(54 responses)- A6% (3)
- B2% (1)
- C2% (1)
- D91% (49)
Why each option
A Business Impact Analysis (BIA) is the document used to quantify the financial and operational consequences of a security incident or breach.
A succession plan addresses continuity of leadership and key personnel roles, not the financial impact of security incidents.
A Continuity of Operations Plan (COOP) describes how an organization maintains essential functions during a disruption but does not focus on quantifying financial losses from specific breach scenarios.
A Disaster Recovery Plan provides technical procedures for restoring systems and data after an incident but does not document financial loss calculations.
A Business Impact Analysis identifies and quantifies the potential financial losses, operational disruptions, and other impacts resulting from specific adverse events such as a database breach. The CIO calculating a minimum $1,000,000 cost per breach is performing exactly the kind of financial loss quantification that a BIA documents. BIA findings inform risk prioritization, insurance decisions, and investment in controls.
Concept tested: Business Impact Analysis and financial loss quantification
Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.