Isaca Certified in Risk and Information Systems Control CRISC Question # 429 Topic 43 Discussion
CRISC Exam Topic 43 Question 429 Discussion:
Question #: 429
Topic #: 43
Which of the following is the PRIMARY reason to compare the business impact analysis (BIA) against the organization ' s business continuity plan (BCP)?
A.
The results of the BIA quantify the BCP objectives and supporting technology for each operational area.
B.
The BCP provides detailed information on alternative facilities to use in case of business interruptions.
C.
The results of the BIA quantify the cost of the technology environment needed to restart each operational area.
D.
The BCP provides the backup and restoration procedures to follow in case of business interruptions.
The BIA identifies critical processes, maximum tolerable downtime, and the business impact of disruptions. CRISC and business continuity practices emphasize that the BCP must bealignedwith BIA results. Comparing the BIA with the BCP ensures that recovery strategies, objectives (RTOs/RPOs), and supporting technologies specified in the BCP actually reflect the priorities and impact levels identified in the BIA for each operational area. Alternative facilities and backup/restoration procedures are important BCP components, but theprimary reasonfor comparison is to validate that the chosen solutions and recovery targets match business requirements. The BIA does not primarily “quantify the cost of the technology environment”; cost analysis may follow but is not the core BIA purpose. Therefore, ensuring that BCP objectives and enabling technology are consistent with BIA findings is the key objective of the comparison.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit