PECB ISO-22301-Lead-Auditor Exam - Topic 5 Question 58 Discussion

Actual exam question for PECB's ISO-22301-Lead-Auditor exam

Question #: 58
Topic #: 5

The organization should establish a formal evaluation process for determining continuity and recovery priorities and objectives.

What is one of the purposes of the Business Impact Analysis (BIA)?

Ato determine the business continuity strategy

Bto determine minimal acceptable outage

Cto identify risks

Dto identify crisis

Show Suggested Answer

Suggested Answer: B

One of the purposes of the business impact analysis (BIA) is to determine the minimal acceptable outage (MAO) for each critical function or process of the organization. The MAO is the maximum amount of time that a function or process can be disrupted before it causes unacceptable consequences for the organization. The MAO is used to define the recovery time objective (RTO) and the recovery point objective (RPO) for each function or process. The RTO is the time within which a function or process must be restored after a disruption, and the RPO is the point in time to which the data and information must be recovered. The BIA helps the organization to prioritize its recovery efforts and allocate the necessary resources for business continuity.Reference: ISO 22301 Auditing eBook, page 38; ISO 22301:2019 standard, clause 8.2.2

by Rosamond at Apr 10, 2025, 02:11 AM

Limited Time Offer

25%

Off

Get Premium ISO-22301-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gearldine

4 months ago

Wait, I thought it was about crisis management?

upvoted 0 times

...

Vivan

4 months ago

C is super important too, can't ignore risks!

upvoted 0 times

...

Amie

4 months ago

Not sure if B is the best choice, seems too narrow.

upvoted 0 times

...

Luz

4 months ago

I think A makes more sense, though.

upvoted 0 times

...

Vivan

5 months ago

B is definitely the right answer!

upvoted 0 times

...

Douglass

5 months ago

I vaguely remember that the BIA helps with crisis identification, but I thought it was more about assessing impacts on the business.

upvoted 0 times

...

Ozell

5 months ago

I feel like identifying risks is definitely a component of the BIA, but it might not be the primary focus.

upvoted 0 times

...

Mertie

5 months ago

I remember something about minimal acceptable outage being a key part of BIA, but I can't recall if that's the main purpose.

upvoted 0 times

...

Lore

5 months ago

I think the BIA is mainly about determining the business continuity strategy, but I'm not entirely sure.

upvoted 0 times

...

Jill

6 months ago

I remember learning about the BIA in class. I believe its main purpose is to identify the risks to the organization, so I'll select option C.

upvoted 0 times

...

Maira

6 months ago

Okay, let me see. The BIA is used to determine the business continuity strategy, so I'm going to go with option A.

upvoted 0 times

...

Alfred

6 months ago

Hmm, I'm a bit unsure about this one. The question is asking about the purpose of the BIA, but the options don't seem to directly match up with that. I'll have to think this through carefully.

upvoted 0 times

...

Jaime

6 months ago

This question seems straightforward. I think the purpose of the Business Impact Analysis (BIA) is to determine the minimal acceptable outage, which is option B.

upvoted 0 times

...

Tresa

11 months ago

Personally, I think the BIA is all about determining the business continuity strategy, so A gets my vote. But what do I know, I'm just the coffee guy.

upvoted 0 times

Elfrieda

10 months ago

C is crucial too, as the BIA helps in identifying risks that could impact the business.

upvoted 0 times

...

Felicia

10 months ago

I think B is also important, it helps in determining the minimal acceptable outage.

upvoted 0 times

...

Kayleigh

10 months ago

I agree, A is the correct answer. The BIA helps in determining the business continuity strategy.

upvoted 0 times

...

Shakira

11 months ago

Haha, I bet the crisis management team would love to know the answer to this one. But in all seriousness, I'm leaning towards B as well.

upvoted 0 times

Elina

10 months ago

C) to identify risks

upvoted 0 times

...

Jacqueline

10 months ago

B) to determine minimal acceptable outage

upvoted 0 times

...

Shalon

11 months ago

A) to determine the business continuity strategy

upvoted 0 times

...

Martha

11 months ago

Hmm, I'm not so sure. I was thinking the BIA is more about identifying risks, so I'd go with C.

upvoted 0 times

...

Laine

12 months ago

I think the answer is B. The BIA helps determine the minimal acceptable outage for the organization.

upvoted 0 times

Blair

10 months ago

D: Exactly, it helps in determining what areas need to be focused on during a disruption.

upvoted 0 times

...

Stephania

10 months ago

C: So, the BIA helps in setting priorities for recovery and continuity planning.

upvoted 0 times

...

Lashonda

10 months ago

B: That's correct. The BIA is crucial for understanding how long the organization can afford to be down.

upvoted 0 times

...

Elmer

11 months ago

A: I think the answer is B. The BIA helps determine the minimal acceptable outage for the organization.

upvoted 0 times

...

Roselle

1 year ago

One of the purposes of the Business Impact Analysis is to determine the minimal acceptable outage.

upvoted 0 times

...

Cecilia

1 year ago

I agree, having a structured approach is important for determining priorities and objectives.

upvoted 0 times

...

Eve

1 year ago

I think the organization should definitely establish a formal evaluation process.

upvoted 0 times

...