Certified Information Systems Auditor CISA · Free Practice Question Easy

Question 9

You are an information system auditor of HDA Inc. You are currently auditing the business continuity activities of the organization. As part of your evaluation, you are assessing the activities that focus on prioritizing the recovery of critical functions. In this context, which of the following activities prioritizes the recovery of critical functions?
  • A A. Risk assessment.
  • B B. Business Impact Analysis (BIA).
  • C C. Incident response planning.
  • D D. Disaster recovery testing.
Reveal correct answer

Correct answer: B

Explanation

Correct answer: B. Business Impact Analysis (BIA). Explanation: The activity that prioritizes the recovery of critical functions in business continuity planning is the Business Impact Analysis (BIA). BIA is a systematic process that identifies and assesses the potential impacts of disruptions to the organization's operations. It helps in identifying critical business functions, determining their dependencies, and evaluating the potential consequences of their loss or unavailability. Based on the BIA findings, organizations can prioritize the recovery of critical functions and allocate resources accordingly to ensure their timely restoration. Risk assessment (option A) is an essential component of the business continuity planning process, but it focuses on identifying and evaluating potential risks and vulnerabilities across the organization. It does not specifically prioritize the recovery of critical functions. Incident response planning (option C) involves establishing procedures and protocols for responding to and managing incidents. While incident response planning is crucial for handling various types of incidents, it does not specifically address the prioritization of critical function recovery. Disaster recovery testing (option D) is the process of testing the effectiveness of disaster recovery plans and procedures. While testing is essential for validating the recovery capabilities, it does not inherently prioritize the recovery of critical functions. The prioritization is typically determined based on the findings of the Business Impact Analysis (BIA). In summary, the activity that specifically prioritizes the recovery of critical functions in business continuity planning is the Business Impact Analysis (BIA). By conducting a BIA, organizations can identify their critical functions and allocate resources and strategies to ensure their timely recovery during disruptive events.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need