What is the MOST important step in business continuity planning?

A.
Risk Assessment

B.
Due Care

C.
Business Impact Analysis (BIA)

D.
Due Diligence

Explanation:
In order to develop the in business continuity planning (BCP), the scope of the project must be determined and
agreed upon. This involves some distinct milestones including Conduct the business impact analysis (BIA). The
BIA helps to identify and prioritize critical IT systems and components.
Incorrect Answers:
A: Risk assessment is part of the business continuity planning, but it is less important compared to the BIA.
B: Due care is not the most important to the business continuity planning. Due care concerns using reasonable
care to protect the interests of an organization.
D: Due diligence is A factor for continuity planning. Due diligence is an investigation of a business or person
prior to signing a contract, or an act with a certain standard of care.

Conrad, Eric, Seth Misenar and Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham, 2012,
p. 356