Business Impact Analysis (BIA) is about:

A.
Technology

B.
Supporting the mission of the organization

C.
Due Care

D.
Risk Assessment

Explanation:
A Business Impact Assessment (BIA) supports the mission of the organization by identifying the resources that
are critical to an organization’s ongoing viability and the threats posed to those resources. The BIA also
assesses the likelihood that each threat will actually occur and the impact those occurrences will have on the
business.
Incorrect Answers:
A: BIA is about critical business functions, and about technology.
C: While due care concerns using reasonable care to protect the interests of an organization, BIA is about
supporting the mission of the organization.
D: BIA is about risk assessment. A BIA often takes place prior to a risk assessment. The BIA focuses on the
effects or consequences of the interruption to critical business functions and attempts to quantify the financial
and non-financial costs associated with a disaster. The business impact assessment looks at the parts of the
organization that are most crucial.

Stewart, James M., Ed Tittel, and Mike Chapple, CISSP: Certified Information Systems Security Professional
Study Guide, 5th Edition, Sybex, Indianapolis, 2011, p. 825