CISSP-ISSMP: Information Systems Security Management Professional

By ISC · Question Mode

QuestionQ35

VerifiedContingency Management

Mark is a security manager at SoftTech Inc. He is participating in the BIA phase to create a document that helps determine the impact a disruptive event would have on the business. The impact may be financial or operational.

Which of the following are objectives related to the phase in which Mark is involved? Each correct answer represents part of the solution.

Choose three
Explanation

A business impact analysis determines the operational and financial effects of disruption, identifies resource requirements, ranks business functions by criticality, and establishes outage or downtime tolerances. A vulnerability assessment is a separate risk-assessment activity that identifies weaknesses that could be exploited.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!