CISM Certified Information Security Manager – Question1432

Which of the following activities is used to determine the effect of a disruptive event?

A.
Maximum tolerable downtime assessment
B. Recovery time objective (RTO) analysis
C. Business impact analysis (BIA)
D. Incident impact analysis

Correct Answer: D