Certified in Risk and Information Systems Control (CRISC) — Question 859

Which of the following BEST enables risk-based decision making in support of a business continuity plan (BCP)?

Answer options

• A. Control analysis
• B. Root cause analysis
• C. Threat analysis
• D. Impact analysis

Correct answer: D

Explanation

Impact analysis is crucial as it evaluates the potential effects of disruptions on business operations, helping prioritize recovery efforts. Control analysis, root cause analysis, and threat analysis, while useful, do not focus specifically on assessing the repercussions of risks on business continuity like impact analysis does.