Business Impact Analysis

Question 0

Define CBF

Answer 0

Business function that must be restored in the event of disruption.
It refers to the vital areas that are crucial to the survivability of organization.

Question 1

Define BIA

Answer 1

Process of analyzing effect of interruptions to business operations or processes on business functions.

It identifies CBFs, qualify and/or quantify losses, determine tolerable downtime and minimum resources needed for recovery.

Question 2

Define recovery time objective (RTO)

Answer 2

Maximum acceptable length of time that can elapse before the lack of business function severely impacts the organization.

Question 3

Define recovery point objective (RPO)

Answer 3

Point in time which system and data must be recovered after a disaster.

Question 4

Risk assessment vs business impact analysis

Answer 4

Risk assessment - identify risks and threats and recommend controls

BIA - identify CBF and evaluate impact of threats and exposures.

Question 5

Reasons for conducting BIA

Answer 5

• provide business rationale
• present findings so management can provide directions for development of bcm
• communicate inherent vulnerabilities
• identify business processes and assets require highest level of protection
• provide info that identifies strategies and alternatives
• provide financial data to select appropriate levels of investment
• establish recovery objectives and timelines

Question 12

Benefits of BIA

Answer 12

• improve organizational stability
• identify key personnel and lessen reliance on them
• protect assets and safety of employees and customers
• validate adequacy of insurance coverage
• provide orderly recovery of CBFs
• compliance with statutory requirements and lessen exposure to legal liabilities