Theprimary purpose of a Business Impact Analysis (BIA) is to prioritize the restoration of systems and applications (D)based on their criticality to business operations. A BIA assesses the impact of disruptions, identifies critical processes, and determines recovery time objectives (RTOs) and recovery point objectives (RPOs).
Other options:
Identifying legal obligations (A)is an aspect of compliance but not the primary benefit of a BIA.
Providing updates on disaster risk levels (B)falls under risk management rather than BIA objectives.
Delineating employee responsibilities (C)is part of business continuity planning (BCP), not the BIA's main goal.
Reference:ISACA CISA Review Manual, Information Systems Operations and Business Resilience