Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 164

Which of the following is the primary goal of an effective business impact analysis?

Answer options

• A. It includes business continuity program governance and risk management.
• B. It identifies key assets, critical processes, resources, and technology.
• C. It sets testing requirements for the organizationwide continuity functions.
• D. It outlines and communicates recovery points and objectives.

Correct answer: D

Explanation

The correct answer is D because the primary goal of a business impact analysis is to clearly outline recovery points and objectives, which are critical for effective recovery planning. Options A, B, and C, while important components of business continuity, do not directly address the main focus of a business impact analysis.