Which of the following item would best help an organization to gain a common understanding of functions that
are critical to its survival?

A.
A risk assessment

B.
A business assessment

C.
A disaster recovery plan

D.
A business impact analysis

Explanation:
A BIA (business impact analysis) is considered a functional analysis, in which a team collects data through
interviews and documentary sources; documents business functions, activities, and transactions; develops a
hierarchy of business functions; and finally applies a classification scheme to indicate each individual function’s
criticality level.
Incorrect Answers:
A: A risk assessment includes the identification of potential risk and the evaluation of the potential impact of the
risk. A risk assessment is a functional analysis of critical business functions.
B: A Business Assessment is a functional analysis of critical business functions. The Business Assessment is
an analysis that identifies the resources that are critical to an organization’s ongoing viability and the threats
posed to those resources.
C: A disaster recovery plan focuses on how to recover various IT mechanisms after a disaster. A disaster
recovery plan is a functional analysis of critical business functions.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 905