Certified Information Security Manager (CISM) — Question 1000

Which of the following would be MOST useful when determining the business continuity strategy for a large organization's data center?

Answer options

• A. Business impact analysis (BIA)
• B. Incident root cause analysis
• C. Stakeholder feedback analysis
• D. Business continuity risk analysis

Correct answer: A

Explanation

A Business Impact Analysis (BIA) is crucial as it identifies critical functions and the potential impact of disruptions, guiding the business continuity strategy effectively. Incident root cause analysis focuses on understanding past incidents, while stakeholder feedback analysis and business continuity risk analysis also provide insights but do not directly inform the overall strategy as comprehensively as a BIA.