Certified in Risk and Information Systems Control (CRISC) — Question 1106

Which of the following analyses is MOST useful for prioritizing risk scenarios associated with loss of IT assets?

Answer options

• A. Cost-benefit analysis
• B. Business impact analysis (BIA)
• C. SWOT analysis
• D. Root cause analysis

Correct answer: B

Explanation

The Business Impact Analysis (BIA) is crucial as it helps identify and evaluate the potential effects of an interruption to critical business operations due to the loss of IT assets. In contrast, a Cost-benefit analysis focuses on financial aspects, SWOT analysis assesses strengths and weaknesses, and Root cause analysis identifies underlying issues, none of which directly prioritize risk scenarios like BIA does.