When performing a business impact analysis (BIA), which of the following should calculate the
recovery time and cost estimates?

A.
Business continuity coordinator

B.
Information security manager

C.
Business process owners

D.
Industry averages benchmarks

Explanation:

Business process owners are in the best position to understand the true impact on the business
that a system outage would create. The business continuity coordinator, industry averages and
even information security will not be able to provide that level of detailed knowledge.