CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ504

Risk Assessment

Which of the following actions should be performed FIRST when developing a business continuity plan (BCP)?

  • A Identifying costs associated with continuity requirements
  • B Performing business impact analysis (BIA)
  • C Establishing recovery time objectives (RTOs)
  • D Identifying critical business functions
Explanation

A business impact analysis (BIA) assesses the operational and financial effects of disruptions and provides the basis for identifying critical business functions, setting recovery time objectives, and determining continuity requirements and costs.

Community Discussion

No comments yet. Be the first to start the discussion!