Certified Information Systems Auditor (CISA) — Question 369

As part of business continuity planning, which of the following is MOST important to assess when conducting a business impact analysis (BIA)?

Answer options

• A. Risk appetite
• B. Completeness of critical asset inventory
• C. Critical applications in the cloud
• D. Recovery scenarios

Correct answer: B

Explanation

The completeness of the critical asset inventory is essential for identifying which assets are vital to the business and how their loss would impact operations. While risk appetite, cloud applications, and recovery scenarios are important, they do not provide the foundational understanding of what must be prioritized during a BIA.