CISA Certified Information Systems Auditor – Question0657

Which of the following is the PRIMARY purpose of conducting a business impact analysis (BIA)?

A.
Identifying risk mitigation options
B. Identifying key business risks
C. Identifying critical business processes
D. Identifying the threat environment

Correct Answer: B