Certified in Risk and Information Systems Control (CRISC) — Question 842

Which of the following is MOST helpful to understand the consequences of an IT risk event?

Answer options

• A. Fault tree analysis
• B. Root cause analysis
• C. Business impact analysis (BIA)
• D. Historical trend analysis

Correct answer: C

Explanation

The correct answer is C, as a Business Impact Analysis (BIA) specifically assesses the potential effects of disruptions on business operations. While Fault tree analysis (A) and Root cause analysis (B) focus on identifying problems and their origins, and Historical trend analysis (D) examines past data, they do not directly evaluate the impact of IT risk events on the organization.