CompTIA CASP+ (CAS-004) — Question 589

An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items.
Which of the following phases establishes the identification and prioritization of critical systems and functions?

Answer options

• A. Review a recent gap analysis.
• B. Perform a cost-benefit analysis.
• C. Conduct a business impact analysis.
• D. Develop an exposure factor matrix.

Correct answer: C

Explanation

The correct answer is C, as a business impact analysis specifically aims to identify and prioritize critical systems and functions within an organization. Options A and B involve assessing gaps and costs but do not focus on critical functions, while option D relates to risk assessment rather than prioritization of functions.