Business Impact Analysis (BIA) CRISC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of a Business Impact Analysis (BIA) in an organization?

   • ATo implement technical security controls that prevent all disruptions from occurring
   • BTo identify critical business functions and quantify the impact of their disruption
   • CTo replace the risk assessment process entirely
   • DTo assign blame for past incidents and ensure accountability
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A bank's BIA identifies that its online banking platform depends on an internal authentication service, a third-party payment gateway, and a database with an RPO of 5 minutes. The third-party payment gateway has an RTO of 2 hours, but the online banking platform has an RTO of 30 minutes. What is the most significant issue with this dependency?

   • AThe payment gateway's RTO exceeds the platform's RTO, creating a recovery gap.
   • BThe database's RPO of 5 minutes is too aggressive.
   • CThe authentication service is an internal dependency and should be outsourced.
   • DThe platform's RTO of 30 minutes is too short for a banking service.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following factors is most important when determining the Recovery Time Objective (RTO) for a critical business function?

   • AThe maximum tolerable downtime based on the impact of disruption
   • BThe age of the systems supporting the function
   • CThe number of users of the function
   • DThe cost of the recovery solution
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A large insurance company is conducting a BIA across multiple departments. The risk practitioner needs to collect consistent data on critical functions and dependencies from 50 business process owners. The budget is limited, and the timeline is tight. Which data collection method is most appropriate?

   • ADistribute a standardized questionnaire to all process owners.
   • BReview existing documentation only, without consulting process owners.
   • CConduct in-depth interviews with each process owner.
   • DHold a single workshop with all process owners.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is an example of an external dependency that would be identified in a BIA dependency analysis?

   • AA third-party cloud service provider hosting critical applications
   • BThe organization's internal help desk staff
   • CThe organization's internal email system
   • DThe company's own data center servers
   Reveal Solution Discussion Select an answer first