CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ336

Risk Optimization

An enterprise has completed a business impact analysis (BIA) that considered several risk scenarios. Which of the following should the enterprise do NEXT?

  • A Assess risk mitigation strategies
  • B Verify compliance with relevant legislation
  • C Perform a risk controls gap analysis
  • D Update the disaster recovery plan (DRP)
Explanation

A business impact analysis establishes the operational and financial effects of disruption and identifies critical business requirements. Those results are used to assess and select risk-mitigation strategies that reduce the identified impacts and support continuity objectives.

Community Discussion

No comments yet. Be the first to start the discussion!