In a Business Impact Analysis (BIA), what is assessed?

In a Business Impact Analysis (BIA), what is assessed?

• A. A BIA identifies hardware and suppliers.
• B. A BIA forecasts market trends.
• C. A BIA defines IT security policies.
• D. A BIA identifies critical business functions, their dependencies, and the impact of disruptions to prioritize recovery strategies.

Answer: (D)

In a Business Impact Analysis, the focus is on identifying what the business must keep running and what those functions depend on. It looks at which functions are critical, what they rely on (people, processes, technology, data, facilities, and third‑party services), and what the consequences would be if those functions were disrupted. By weighing the impact of outages across areas like financial loss, operational capability, regulatory compliance, reputational harm, and safety, you establish which functions to restore first and what resources and recovery strategies are needed. This information guides setting recovery targets and prioritizing investments in resilience. The other options don’t capture this core idea: identifying hardware and suppliers is only a narrow piece, market forecasts involve market analysis, and IT security policies relate to governance rather than disruption impact and recovery prioritization.

In a Business Impact Analysis, the focus is on identifying what the business must keep running and what those functions depend on. It looks at which functions are critical, what they rely on (people, processes, technology, data, facilities, and third‑party services), and what the consequences would be if those functions were disrupted. By weighing the impact of outages across areas like financial loss, operational capability, regulatory compliance, reputational harm, and safety, you establish which functions to restore first and what resources and recovery strategies are needed. This information guides setting recovery targets and prioritizing investments in resilience. The other options don’t capture this core idea: identifying hardware and suppliers is only a narrow piece, market forecasts involve market analysis, and IT security policies relate to governance rather than disruption impact and recovery prioritization.