Isaca CISM Exam - Topic 5 Question 81 Discussion

Actual exam question for Isaca's CISM exam

Question #: 81
Topic #: 5

[All CISM Questions]

Which of the following is MOST helpful in determining the criticality of an organization's business functions?

ADisaster recovery plan (DRP)

BBusiness impact analysis (BIA)

CBusiness continuity plan (BCP)

DSecurity assessment report (SAR)

Show Suggested Answer

Suggested Answer: B

Business impact analysis (BIA) is the most helpful in determining the criticality of an organization's business functions because it is a process of identifying and evaluating the potential effects of disruptions or interruptions to those functions. BIA helps to prioritize the recovery of the most critical functions and to estimate the resources and time needed for the recovery. Therefore, business impact analysis (BIA) is the correct answer.

https://www.linkedin.com/pulse/business-continuity-critical-functions-tino-marquez

https://www.techtarget.com/searchitchannel/feature/Business-impact-analysis-for-business-continuity-Understanding-impact-criticality

by Norah at Aug 28, 2024, 05:09 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barbra

3 months ago

I never thought about it this way, but BIA makes sense!

upvoted 0 times

...

Tracie

3 months ago

I agree, BIA really helps prioritize what matters most.

upvoted 0 times

...

Cyril

3 months ago

Wait, isn't a DRP just for recovery, not criticality?

upvoted 0 times

...

Brittni

4 months ago

I think BCP is more important for continuity.

upvoted 0 times

...

Margart

4 months ago

Definitely BIA is key for understanding business functions.

upvoted 0 times

...

Mitsue

4 months ago

I’m a bit confused because I thought the Business Continuity Plan (BCP) also plays a role in this, but I can't remember how it compares to the BIA.

upvoted 0 times

...

Rickie

4 months ago

I practiced a similar question where the BIA was emphasized as key for understanding impacts on business functions. I feel like that’s the right choice here.

upvoted 0 times

...

Ivette

4 months ago

I think the Disaster Recovery Plan (DRP) might help too, but I recall that it focuses more on recovery rather than determining criticality.

upvoted 0 times

...

Elenora

5 months ago

I remember studying that a Business Impact Analysis (BIA) is crucial for identifying critical functions, but I'm not entirely sure if it's the most helpful.

upvoted 0 times

...

Xochitl

5 months ago

Okay, I've got this. The BIA is the most helpful in determining criticality because it analyzes the potential impact of disruptions on the organization's critical operations and processes. The other options are more about the plans themselves, not the actual assessment.

upvoted 0 times

...

Thaddeus

5 months ago

Hmm, I'm a bit unsure about this one. The options seem pretty similar, but I'm leaning towards the business impact analysis (BIA) since that's specifically about assessing the impact of disruptions on business functions.

upvoted 0 times

...

Jannette

5 months ago

This seems like a straightforward question about business continuity planning. I think the key is to focus on the concept of "criticality" and which of these elements would best determine that.

upvoted 0 times

...

Alita

5 months ago

I'm a little confused by the wording of the question. Aren't all of these elements important for determining criticality? I'll have to think this through carefully and make sure I understand the nuances between them.

upvoted 0 times

...

Daron

5 months ago

I remember something about email notifications, but I can't recall if it's the mailing list or the extended email config.

upvoted 0 times

...

Royce

5 months ago

If I recall correctly, risk transfer is definitely an alternative, but risk assessment seems like it might not fit either.

upvoted 0 times

...

Jettie

1 year ago

Disaster recovery plan? More like disaster waiting to happen if you don't have the BIA to back it up. Come on, people, it's a no-brainer!

upvoted 0 times

Cassi

1 year ago

A) Disaster recovery plan (DRP)

upvoted 0 times

...

Terina

1 year ago

Exactly, the BCP helps ensure that critical functions can continue during and after a disaster.

upvoted 0 times

...

Florinda

1 year ago

C) Business continuity plan (BCP)

upvoted 0 times

...

Floyd

1 year ago

You're right, the BIA is crucial for understanding the impact of disruptions on business functions.

upvoted 0 times

...

Brunilda

1 year ago

D) Security assessment report (SAR)

upvoted 0 times

...

Letha

1 year ago

C) Business continuity plan (BCP)

upvoted 0 times

...

Tyra

1 year ago

B) Business impact analysis (BIA)

upvoted 0 times

...

Lorrie

1 year ago

A) Disaster recovery plan (DRP)

upvoted 0 times

...

Bette

1 year ago

I'm sorry, but a security assessment report is about as helpful as a chocolate teapot in determining criticality. BIA all the way, baby!

upvoted 0 times

...

Adelina

1 year ago

Business continuity plan? That's just the icing on the cake. The BIA is the cake itself, it's where the real meat and potatoes are.

upvoted 0 times

Evangelina

1 year ago

True, the BCP is important too, it helps ensure the organization can continue operating during a crisis.

upvoted 0 times

...

Odelia

1 year ago

I agree, the BIA is crucial for understanding the impact of disruptions on business functions.

upvoted 0 times

...

Krissy

1 year ago

But don't forget about the DRP, it's essential for outlining the steps to take during a disaster.

upvoted 0 times

...

Kris

1 year ago

I think all options are important, but BIA gives a more comprehensive view of critical business functions.

upvoted 0 times

...

Zita

1 year ago

I believe the Disaster recovery plan (DRP) is also important in determining criticality.

upvoted 0 times

...

Marjory

1 year ago

I agree with Ashanti, BIA helps to assess the impact of disruptions on business functions.

upvoted 0 times

...

Ocie

2 years ago

Security assessment report? Nah, that's more about vulnerabilities, not the business impact. Gotta go with the BIA, it's the real deal.

upvoted 0 times

...

Eladia

2 years ago

The BIA is the way to go, it gives you the lowdown on what's truly critical. Disaster recovery is important, but it's more about the technical side of things.

upvoted 0 times