Certified in Risk and Information Systems Control (CRISC) — Question 930

Which of the following is the MOST important outcome of a business impact analysis (BIA)?

Answer options

• A. Reduction of security and business continuity threats
• B. Completion of the business continuity plan (BCP)
• C. Understanding and prioritization of critical processes
• D. Identification of regulatory consequences

Correct answer: C

Explanation

The correct answer is C because understanding and prioritizing critical processes is essential for effectively managing business continuity and ensuring that vital operations are maintained during disruptions. Options A, B, and D, while important, do not capture the primary focus of a BIA, which is to identify and prioritize the processes that are most critical to the business's survival and resilience.