Business Impact Analysis

[Nitesh]

Dear Team

I am preparing for upcoming CISSP exam and currently doing self study.

Need you advice for below question

Which of the following should be emphasised during the Business Impact Analysis (BIA) considering that the BIA focus is on business processes?

A. Composition

B. Priorities
C. Dependencies

D. Service levels

I suppose Option B & Option C makes sense as Business process Priorities & Dependencies are important to be considered during BIA.

However the best answer should be option B as priority & criticality of business process should be considered first and then dependencies of the business process should be evaluated.

Appreciate your advice on the correct answer.

Thanks

Nitesh

[satya]

I think you are spot on.

BIA (impact of business is focussed on how orderly prioritize if some disaster happens and how to deal with it - MTD, RPO, RTO, COOP scenarios etc.) -- I am favorable to priority of resources based on critical infrastructure/applications.

[ericgeater]

Establishing priority is first requirement.  Criticality of resources begins with knowing what must be restored in a disaster or crisis.  Dependencies will be the next requirement, to preserve or plan on behalf of the systems and components.