Which of the following steps should be performed first in a business impact analysis (BIA)?

A.
Identify all business units within the organization.

B.
Evaluate the impact of disruptive events.

C.
Estimate the Recovery Time Objectives (RTO).

D.
Evaluate the criticality of business functions.

Explanation:
Remember that when we talk about a BIA (Business Impact Analysis), we are
analyzing and identifying possible issues about our infrastructure. It’s an analysis about the
business, the process that it relays on, the level of the systems and a estimative of the financial
impact, or in other words, how much many we loose with our systems down. The first step on it
should always be the identifying of the business units in the company. You can then go to other
requirements like estimate losses and downtime costs.