Certified in Risk and Information Systems Control (CRISC) — Question 363

As part of business continuity planning, which of the following is MOST important to include in a business impact analysis (BIA)?

Answer options

• A. An assessment of threats to the organization
• B. An assessment of recovery scenarios
• C. Industry standard framework
• D. Documentation of testing procedures

Correct answer: A

Explanation

The correct answer is A because an assessment of threats identifies potential risks that could impact the organization, which is essential for effective planning. Options B, C, and D, while important, do not address the immediate need to understand the threats that could disrupt business operations.