Which of the following tasks is NOT usually part of a Business Impact Analysis (BIA)?

A.
Calculate the risk for each different business function.

B.
Identify the company’s critical business functions.

C.
Calculate how long these functions can survive without these resources.

D.
Develop a mission statement.

Explanation:
To develop a mission statement is not part of the BIA process.
The eight BIA Steps are listed below:
1. Select individuals to interview for data gathering.
2. Create data-gathering techniques (surveys, questionnaires, qualitative and quantitative approaches).
3. Identify the company’s critical business functions.
4. Identify the resources these functions depend upon.5. Calculate how long these functions can survive without these resources.
6. Identify vulnerabilities and threats to these functions.
7. Calculate the risk for each different business function.
8. Document findings and report them to management.
Incorrect Answers:
A: To calculate the risk for each different business function is step seven in the BIA process.
B: Identifying the company’s critical business functions is step three in the BIA process.
C: To calculate how long these functions can survive without these resources is step five in the BIA process.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 908