Certified Information Security Manager CISM · Free Practice Question Easy
Question 104
When conducting a business impact analysis (BIA), which of the following should determine the estimates for recovery time and cost?
- A A. IT department personnel.
- B B. External consultants specializing in disaster recovery.
- C C. Process owners.
- D D. Senior management.
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Process owners. Explanation: During a business impact analysis (BIA), the estimates for recovery time and cost should be determined by process owners. Process owners have a deep understanding of the business processes they oversee, including the criticality of each process to the organization. They are best positioned to provide accurate assessments of the time required for recovery and the associated costs. While input from the IT department, external consultants, and senior management may be valuable, involving process owners ensures a more comprehensive and accurate analysis of the impact on business processes during a disruption.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
