Certified in Risk and Information Systems Control (CRISC) — Question 1163

Which of the following is the MOST important outcome of a business impact analysis (BIA)?

Answer options

• A. Determining availability requirements for systems used by the business
• B. Identifying sensitive data within business processes and applications
• C. Documenting the order and timing of restoration for critical systems
• D. Prioritizing critical business processes and applications

Correct answer: D

Explanation

The correct answer is D because prioritizing critical business processes and applications is essential for effective resource allocation and recovery strategies. Options A, B, and C, while important aspects of a BIA, do not address the overarching goal of ensuring that the most vital functions are preserved and restored promptly in the event of a disruption.