CISM Certified Information Security Manager – Question1062

Which of the following is the PRIMARY purpose of conducting a business impact analysis (BIA)?

A.
Identifying risk mitigation options
B. Identifying critical business processes
C. Identifying key business risks
D. Identifying the threat environment

Correct Answer: C