Certified in the Governance of Enterprise IT (CGEIT) — Question 287

An IT steering committee wants to select a disaster recovery site based on available risk data. Which of the following would BEST enable the mapping of cost to risk?

Answer options

• A. Scenario-based assessment
• B. Qualitative forecasting
• C. Key risk indicators (KRIs)
• D. Business impact analysis (BIA)

Correct answer: D

Explanation

The Business Impact Analysis (BIA) is essential for understanding the potential effects of disruptions on business operations, which helps in linking costs with risks. The other options, while useful, do not provide a comprehensive view of how risks translate into financial implications like a BIA does.