Certified Information Systems Auditor (CISA) — Question 783

Which of the following provides the MOST useful information for performing a business impact analysis (BIA)?

Answer options

• A. Policies for business procurement
• B. Inventory of relevant business processes
• C. Results of business resumption planning efforts
• D. Documentation of application configurations

Correct answer: B

Explanation

The correct answer is B, as having an inventory of relevant business processes allows for identifying critical functions and potential impacts of disruptions. Options A, C, and D, while useful, do not provide the same direct insight into the processes that are essential for BIA.