CompTIA SecurityX (CAS-005) — Question 249

A compliance officer is facilitating a business impact analysis and wants business unit leaders to collect meaningful data. Several business unit leaders want more information about the types of data the officer needs. Which of the following data types would be the most beneficial for the compliance officer? (Choose two.)

Answer options

• A. Inventory details
• B. Applicable contract obligations
• C. Costs associated with downtime
• D. Network diagrams
• E. Contingency plans
• F. Critical processes

Correct answer: C, F

Explanation

The costs associated with downtime (C) are crucial for understanding the financial impact of disruptions, while critical processes (F) identify essential functions that must be maintained for business continuity. The other options, while relevant, do not provide the same level of insight into the immediate impacts of business interruptions.