Study. uk . com
  1. Home
  2. All questions
  3. Question 871

CISM study material · question 871 of 1000

What does a business impact analysis do, in NIST's formulation?

  1. Correlates a system with the business processes it supports and characterises the consequences of their disruption
  2. Ranks each of the threats by their likelihood and by their impact in order to produce the organisation's own risk register entries
  3. Assesses the effectiveness of existing preventive controls
  4. Documents the recovery procedures for the system
Show the answer

Answer: A. Correlates a system with the business processes it supports and characterises the consequences of their disruption

SP 800-34r1 states the purpose of the business impact analysis is to correlate the system with the critical mission and business processes and services it provides, and from that information to characterise the consequences of a disruption.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.2 Conduct the Business Impact Analysis

Challenge yourself on this topic → Study as cards