Out of the steps listed below, which one is not one of the steps conducted during the Business Impact Analysis
(BIA)?

A.
Alternate site selection

B.
Create data-gathering techniques

C.
Identify the company’s critical business functions

D.
Select individuals to interview for data gathering

Explanation:
Alternate site selection is among the eight BIA steps.
Note: The eight BIA Steps are listed below:
1. Select individuals to interview for data gathering.
2. Create data-gathering techniques (surveys, questionnaires, qualitative and quantitative approaches).
3. Identify the company’s critical business functions.
4. Identify the resources these functions depend upon.
5. Calculate how long these functions can survive without these resources.
6. Identify vulnerabilities and threats to these functions.
7. Calculate the risk for each different business function.
8. Document findings and report them to management.
Incorrect Answers:
B: Creating data-gathering techniques is the second out of the eight BIA steps.
C: To identify the company’s critical business functions is the third out of the eight BIA steps.
D: Selecting individuals to interview for data gathering is the first out of the eight BIA steps.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 908