What does a business impact analysis identify?

What does a business impact analysis identify?

• A. Identifies critical functions, dependencies, and the potential impact of disruptions to operations.
• B. Specified only financial risks of projects.
• C. Lists contact details for staff in leadership roles.
• D. Defines data retention periods for each data type.

Answer: (A)

A business impact analysis focuses on identifying which functions are critical to operations, what they depend on (people, processes, systems, facilities, and suppliers), and how disruptions could impact the business. It helps determine the order in which functions must be recovered and the timing allowed for recovery by evaluating potential effects on revenue, safety, regulatory compliance, and reputation. This information underpins recovery strategies, including setting recovery time objectives and data recovery priorities. The other options miss the broader scope. Financial risks of projects are only part of risk, not the full operational impact BIA assesses. Contact details for leadership are irrelevant to identifying operational dependencies and impacts. Data retention policies cover governance, not the operational continuity implications captured by a BIA.

A business impact analysis focuses on identifying which functions are critical to operations, what they depend on (people, processes, systems, facilities, and suppliers), and how disruptions could impact the business. It helps determine the order in which functions must be recovered and the timing allowed for recovery by evaluating potential effects on revenue, safety, regulatory compliance, and reputation. This information underpins recovery strategies, including setting recovery time objectives and data recovery priorities.

The other options miss the broader scope. Financial risks of projects are only part of risk, not the full operational impact BIA assesses. Contact details for leadership are irrelevant to identifying operational dependencies and impacts. Data retention policies cover governance, not the operational continuity implications captured by a BIA.