Exam CISM topic 1 question 158 discussion

A Business Impact Analysis (BIA) is used to identify and evaluate the potential effects of disruptions to critical business processes. It helps organizations understand the potential financial, legal, and reputational impacts of a disruption, as well as the resources (people, systems, facilities, etc.) required to support critical business functions. Based on this analysis, an organization can develop a recovery strategy that prioritizes the restoration of critical business processes and minimizes the impact of disruptions. This is why A. Recovery strategy is primarily influenced by a Business Impact Analysis (BIA).

A Business Impact Analysis (BIA) identifies the critical business processes, their dependencies, and the impact of disruptions on the organization. This analysis helps determine the acceptable downtime and recovery time objectives (RTOs) and recovery point objectives (RPOs). Based on this information, the recovery strategy is developed to ensure the organization can restore operations within acceptable timeframes after a disruption.

B. Recovery strategy is a part of risk mitigation strategy .

The primary purpose of a BIA is to help organizations prioritize their resources and efforts to ensure the continuity of critical operations during and after disruptive events. This involves determining recovery time objectives (RTOs) and recovery point objectives (RPOs) for each critical process or system. These objectives specify how quickly systems and processes need to be restored and how much data loss is acceptable.

A. The primary purpose of a BIA is to help organizations prioritize their resources and efforts to ensure the continuity of critical operations during and after disruptive events. This involves determining recovery time objectives (RTOs) and recovery point objectives (RPOs) for each critical process or system. These objectives specify how quickly systems and processes need to be restored and how much data loss is acceptable.

Recovery Strategy for sure

risk mitigation.

A. Recovery strategy

A business impact analysis (BIA) is a process that identifies and evaluates the potential impact of disruptions to business operations. It assesses the criticality of business processes, determines recovery time objectives (RTOs) and recovery point objectives (RPOs), and identifies dependencies and interdependencies between various components of the organization. Based on the findings of a BIA, an organization can develop a recovery strategy. The recovery strategy outlines the approaches and methods to be employed for restoring business operations after a disruption. It includes decisions about the prioritization of critical processes, allocation of resources, establishment of alternate sites, and implementation of recovery procedures

A business impact analysis (BIA) is a process that helps identify an organization's critical business processes, the resources that support them, and the potential impacts that would result from a disruption. The primary objective of a BIA is to provide information to help an organization develop recovery strategies that prioritize the restoration of critical business functions.

clearly A. ya tu sabes

Clearly A

Voting B. Separate comment below.

B is my choice. Reasoning: Risk Management encompasses these steps: Risk Assessment, Risk Identification, Risk Analysis (BIA happens here), Risk Treatment. Thus, a BIA would impact the Risk Mitigation (Risk Treatment) Strategy.

Its neither B nor A. C is the correct answer.

Clearly, A.