Business Impact Analysis (BIA) CRISC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A manufacturing company is conducting a BIA for its production planning function. The BIA team is assessing the impact of a 48-hour disruption. Which impact should be considered to determine the RTO?

   • AThe cost of the production planning software license.
   • BThe time needed to restore the production planning system from backups.
   • CThe loss of revenue from delayed shipments and potential contractual penalties.
   • DThe number of employees who use the production planning system.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A risk practitioner is planning a BIA for a mid-sized logistics company. The company has limited resources and needs to complete the BIA within a month. The practitioner has identified the key business functions and stakeholders. What should be the next step in the BIA process?

   • ACollect data from stakeholders using interviews, questionnaires, or workshops.
   • BConduct a risk assessment to identify threats.
   • CDevelop recovery strategies for each critical function.
   • DImplement backup solutions for critical systems.
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A retail chain is starting a BIA. The CEO asks the risk practitioner to explain why a BIA is needed before investing in disaster recovery solutions. Which explanation best describes the purpose of a BIA?

   • ATo assign ownership of all business processes to specific departments.
   • BTo identify which business functions are critical and what impact their disruption would have on the organization.
   • CTo determine the exact cost of every recovery solution.
   • DTo list all potential threats that could affect the organization.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A regional bank is conducting a BIA. The head of retail banking insists that the branch network is the most critical function because it generates the highest revenue. However, the head of IT argues that the online banking platform is more critical because it processes 80% of transactions. The bank's board wants to prioritize based on overall impact to the organization. Which approach should the risk practitioner take?

   • APrioritize the branch network because it has the highest direct revenue.
   • BPrioritize the online banking platform because it processes the majority of transactions.
   • CConduct a quantitative impact assessment for both functions and compare the results over time.
   • DAssign equal priority to both functions to avoid organizational conflict.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   During the analysis step of a Business Impact Analysis (BIA), what is the primary activity?

   • AConducting interviews with business unit managers to gather information
   • BDistributing the final BIA report to executive management
   • CImplementing recovery strategies for critical functions
   • DEvaluating the collected data to determine the impact of disruptions on business functions
   Reveal Solution Discussion Select an answer first