Certified Information Security Manager (CISM) — Question 1129

The MOST significant outcome obtained from conducting a business impact analysis (BIA) is improved:

Answer options

• A. employee awareness.
• B. disaster recovery planning.
• C. IT capacity planning.
• D. budgeting.

Correct answer: B

Explanation

The correct answer, B, highlights that a BIA is crucial for developing effective disaster recovery strategies by identifying critical processes and their dependencies. The other options, while important, do not directly stem from the primary focus of a BIA, which is to ensure that an organization is prepared for potential disruptions.