Certified Information Systems Auditor (CISA) — Question 1261

Which of the following is MOST important to consider when developing a business continuity plan (BCP)?

Answer options

• A. Results of enterprise risk assessment
• B. Results of annual tabletop exercises
• C. Updated business impact analysis (BIA)
• D. Executive buy-in of the plan

Correct answer: C

Explanation

The updated business impact analysis (BIA) is crucial as it identifies critical business functions and the impacts of disruptions, guiding the BCP’s priorities. While the other options provide valuable insights, they do not directly inform the core elements of the BCP as effectively as the BIA does.