Certified Information Security Manager (CISM) — Question 663

Conducting a business impact analysis (BIA) BEST helps to identify:

Answer options

• A. asset inventory
• B. mitigation costs
• C. residual risk
• D. system criticality

Correct answer: D

Explanation

The correct answer is D, as a business impact analysis primarily aims to determine the criticality of systems in the context of business operations. While asset inventory, mitigation costs, and residual risk are important concepts, they are not the main focus of a BIA.