Certified Information Security Manager (CISM) — Question 719

Which of the following would be MOST helpful to identify worst-case disruption scenarios?

Answer options

• A. Cost-benefit analysis
• B. SWOT analysis
• C. Business process analysis
• D. Business impact analysis (BIA)

Correct answer: D

Explanation

The Business Impact Analysis (BIA) is specifically designed to evaluate the effects of interruptions on business operations, making it the most suitable choice for identifying worst-case disruption scenarios. Other options like SWOT analysis and cost-benefit analysis focus on broader assessments rather than specific disruption impacts, while business process analysis mainly examines workflows rather than the consequences of disruptions.