CISA Certified Information Systems Auditor – Question0664

Which of the following is the FIRST step when conducting a business impact analysis?

A.
Identifying critical information resources
B. Identifying events impacting continuity of operations
C. Analyzing past transaction volumes
D. Creating a data classification scheme

Correct Answer: A