Understanding Business Impact Analysis (BIA):
ABIA assesses the effects of disruptionsto an organization's operations.
It helpsprioritize resourcesbased on the potential impact ofdowntime, compliance issues, and critical processes.
Why Options B, C, and F are Correct:
B (Applicable contract obligations)→ Many companies havelegal and compliance obligationsregarding downtime, availability, and SLAs. This information helps determine whatrisk levelsare acceptable.
C (Costs associated with downtime)→ BIA quantifies the financial impact of system failures. Knowinglost revenue, regulatory fines, and recovery costshelps in planning.
F (Critical processes)→ Identifyingcore business processesallows an organization toprioritize recoveryeffortsandmaintain operational continuity.
Why Other Options Are Incorrect:
A (Inventory details)→ While useful for asset management, it doesnot directly impact business continuity planning.
D (Network diagrams)→ These help in security architecture but arenot directly related to the financial/business impact analysis.
E (Contingency plans)→ BIA isperformed before contingency planningto identifywhat needs protection.
Reference:
CompTIA SecurityX CAS-005 Official Study Guide:Business Impact Analysis (BIA) & Risk Management NIST SP 800-34:Business Continuity & Contingency Planning