CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ1113

Information Security Risk Management

What is the PRIMARY purpose of a business impact analysis (BIA)?

  • A To define security roles and responsibilities
  • B To determine the criticality of information assets
  • C To establish incident severity levels
  • D To determine return on investment (ROI)
Explanation

A business impact analysis evaluates the consequences of interruptions to business operations in order to identify and prioritize critical information assets, processes, and services for continuity and recovery planning.

Community Discussion

No comments yet. Be the first to start the discussion!