Certified in Risk and Information Systems Control (CRISC) — Question 796

The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:

Answer options

• A. map the business processes to supporting IT and other corporate resources.
• B. document the disaster recovery process.
• C. obtain the support of executive management.
• D. identify critical business processes and the degree of reliance on support services.

Correct answer: D

Explanation

The correct answer is D because the primary focus of a BIA is to pinpoint vital business functions and assess how much they rely on various support services. Option A, while related, is not the main goal, and options B and C are elements of continuity planning but do not capture the essence of a BIA.