Which of the following will a Business Impact Analysis NOT identify?

A.
Areas that would suffer the greatest financial or operational loss in the event of a disaster.

B.
Systems critical to the survival of the enterprise.

C.
The names of individuals to be contacted during a disaster.

D.
The outage time that can be tolerated by the enterprise as a result of a disaster.

Explanation:
A Business Impact Analysis (BIA) does not identify persons that should be contacted during a disaster.
Incorrect Answers:
A: A Business Impact Analysis (BIA) is performed at the beginning of business continuity planning to identify all
the areas of the enterprise that would suffer the greatest financial or operational loss in the event of a disaster
or disruption.
B: The BIA identifies the company’s critical systems needed for survival.
D: The BIA estimates the outage time that can be tolerated by the company as a result of a disaster or
disruption.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 911