Business Impact Analysis (BIA) CRISC Practice Questions (Page 8)

Questions 36–37

1. 36foundation · easy

   What does the Recovery Point Objective (RPO) define for a system supporting a critical business function?

   • AThe maximum acceptable downtime for the system
   • BThe time required to restore data from backup
   • CThe minimum amount of data that must be backed up
   • DThe maximum acceptable amount of data loss measured in time
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A manufacturing company is conducting a BIA for its order-to-cash process. The process depends on an internal ERP system, a third-party logistics provider, and a small team of order processors. The risk practitioner needs to identify which dependencies are most critical to the process. Which action should the practitioner take first?

   • AInterview the order processing team to understand their daily tasks.
   • BMap the process flow and identify each dependency's role and impact on the process.
   • CAssign RTOs to the ERP system and the logistics provider immediately.
   • DReview the contract with the third-party logistics provider for penalties.
   Reveal Solution Discussion Select an answer first