CISA Certified Information Systems Auditor – Question2069

When developing a business continuity plan (BCP), which of the following should be performed FIRST?

A.
Develop business continuity training
B. Classify operations
C. Conduct a business impact analysis (BIA)
D. Establish a disaster recovery plan (DRP)

Correct Answer: C