Certified in Risk and Information Systems Control (CRISC) — Question 215

Which of the following data would be used when performing a business impact analysis (BIA)?

Answer options

• A. Cost of regulatory compliance
• B. Expected costs for recovering the business
• C. Cost-benefit analysis of running the current business
• D. Projected impact of current business on future business

Correct answer: B

Explanation

The correct answer, B, is important because it directly addresses the costs associated with recovering the business after a disruption. Options A, C, and D, while relevant to business operations, do not specifically pertain to the recovery costs assessed in a BIA.