CISM Certified Information Security Manager – Question0304

Which of the following are the essential ingredients of a business impact analysis (B1A)?

A.
Downtime tolerance, resources and criticality
B. Cost of business outages in a year as a factor of the security budget
C. Business continuity testing methodology being deployed
D. Structure of the crisis management team

Correct Answer: A

Explanation:

Explanation:
The main purpose of a BIA is to measure the downtime tolerance, associated resources and criticality of a business function. Options B, C and D are all associated with business continuity planning, but are not related to the BIA.