Certified Information Systems Auditor (CISA) — Question 1372

Which of the following data would be used when performing a business impact analysis (BIA)?

Answer options

• A. Projected impact of current business on future business
• B. Expected costs for recovering the business
• C. Cost of regulatory compliance
• D. Cost-benefit analysis of running the current business

Correct answer: B

Explanation

The correct answer is B because the expected costs for recovering the business are critical in assessing how a disruption could impact operations. Options A, C, and D, while relevant to the overall business strategy, do not specifically focus on the financial aspects of recovery which are essential for a BIA.