Business Impact Analysis (BIA) CRISC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following represents the correct sequence of key steps in conducting a Business Impact Analysis (BIA)?

   • AData collection, analysis, and reporting
   • BReporting, data collection, and analysis
   • CData collection, reporting, and analysis
   • DAnalysis, reporting, and data collection
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does the Business Impact Analysis (BIA) integrate with the overall risk assessment process?

   • AIt is a separate process that has no connection to risk assessment
   • BIt provides the impact component used to calculate risk and prioritize risk treatment
   • CIt replaces the need for risk identification
   • DIt only focuses on financial impacts and ignores operational impacts
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In a Business Impact Analysis (BIA), what does impact assessment primarily measure?

   • AThe likelihood of a specific threat occurring
   • BThe financial and operational consequences of a disruption over time
   • CThe cost of implementing security controls
   • DThe number of vulnerabilities in a system
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following best describes how BIA outputs inform risk treatment decisions?

   • AThey provide a list of all possible threats
   • BThey determine the exact likelihood of each risk
   • CThey help prioritize which risks to treat based on the impact of disruption
   • DThey eliminate the need for risk monitoring
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A hospital's BIA shows that the patient admissions system has a maximum tolerable downtime of 4 hours, after which patient safety and regulatory compliance are severely impacted. The IT team proposes a recovery solution that can restore the system in 6 hours. What should the risk practitioner recommend?

   • AIncrease the RTO to 6 hours to match the proposed solution.
   • BReduce the RTO to 2 hours to provide a safety margin.
   • CRequire a recovery solution that meets the 4-hour RTO or less.
   • DAccept the 6-hour recovery time because it is close to the 4-hour target.
   Reveal Solution Discussion Select an answer first