Exam CRISC topic 1 question 517 discussion

D. Update the business impact analysis (BIA) for significant business changes.

D. Update the business impact analysis (BIA) for significant business changes: The BIA is a foundational document that identifies and evaluates the potential effects of interruptions to an organization's critical business functions. It prioritizes business processes based on their importance to the business. Regularly updating the BIA ensures that the BCP and DRP are always aligned with the organization's current priorities and needs, especially when there are significant changes to the business.

D. update the business impact analysis (BIA) for significant business changes A Business Impact Analysis (BIA) is an essential component of an organization's business continuity framework, and its main purpose is to identify the potential impacts of disruptive events on the organization. By continually updating the BIA to reflect significant changes in business processes, priorities, and dependencies, an organization can ensure that its BCP and DRP are always aligned with core business needs. This alignment ensures that the most critical functions are prioritized and adequately protected.

D. Update the business impact analysis (BIA) for significant business changes. The best method to align an organization's business continuity plan (BCP) and disaster recovery plan (DRP) with core business needs is to update the business impact analysis (BIA) for significant business changes. A business impact analysis assesses the potential impact of various disruptions on the organization's core functions, processes, and services. By regularly updating the BIA, an organization can ensure that its BCP and DRP reflect the current state of the business and its priorities.

c "test fix everything"

"D" is closer. Though, changes only are considered not the all processes. Walk-though aims to ensure that the plans are accurate and up-to-date. CRISC questions are confusing :-(

Option D is as follows: Significant business changes, force changes to BIA which forces changes to BCP and DRP. I chose D.

Agree with C.

The BCP (a plan used by an enterprise to respond to disruption of critical business processes) begins with the BIA, which identifies critical services and establishes the RPO and RTO, which are a reference for the DRP (a set of human, physical, technical and procedural resources to recover, within a defined time and cost, an activity interrupted by an emergency or disaster). The BCP has a broader focus, I think updating only the BIA would fall short.

The BEST method to align an organization's business continuity plan (BCP) and disaster recovery plan (DRP) with core business needs to: A. outsource the maintenance of the BCP and DRP to a third party -> involving a third party will not necessarily affect the status quo of a BCP/DRP that is out of line with business needs B. include BCP and DRP responsibilities as part of the new employee training -> training random employees will not help senior management/business owners improve the BCP/DRP C. execute periodic walk-throughs of the BCP and DRP -> correct (assumes that the walk-throughs include sensible participants) D. update the business impact analysis (BIA) for significant business changes <- BIA is part of BCP. updating only the BIA will not improve the entire BCP, and will have no impact on the DRP.

the keyword is align. update BIA , doesnt mean, BCP and DRP will align and update automatically. so given answer C is correct。

D is the correct answer., . update the business impact analysis (BIA) for significant business changes. This site is a recipe for failing with the asnwers given.

I will go with D. The BCP and DRP are based on the BIA.

Why can't it be D?