CISA Question 285

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  According to ISACA, the most important aspect of a Business Impact Analysis (BIA) is the identification and assessment of critical assets and resources. This helps ensure that the organization can effectively prioritize recovery efforts based on the impact to the business. While risk appetite, recovery scenarios, and critical applications in the cloud are relevant, the completeness of the critical asset inventory remains the primary focus in the context of the BIA. ISACA emphasizes understanding which assets, processes, and systems are essential for business continuity and ensuring that these are included in the BIA process. This allows the organization to plan for and respond to potential disruptions effectively.

• Chose D1

  Recovery scenarios identify the steps and processes needed to restore critical business operations and services in the event of a disruption, disaster, or incident. This assessment ensures that there is a clear understanding of how recovery will be executed to minimize downtime, financial loss, and reputational damage.

• Chose B3

  While risk appetite (option A) is also an important consideration in business continuity planning, it typically pertains to the organization's willingness to accept risks rather than the specific assessment conducted during the BIA process. The completeness of the critical asset inventory forms the foundation for evaluating risks and developing appropriate continuity strategies based on the organization's risk appetite. Therefore, assessing the completeness of the critical asset inventory is generally considered the MOST important aspect of conducting a business impact analysis.