BCI Business Impact Analysis 1 — Questions and Answers
Question 1: What is the primary purpose of a Business Impact Analysis (BIA)?
- To identify potential threats to the organization
- To determine the effect of disruptions on critical business functions (Correct answer)
- To create a risk register for the organization
- To develop recovery strategies for IT systems
Correct answer: To determine the effect of disruptions on critical business functions
A BIA determines the effect of disruptions on critical business functions, helping organizations prioritize recovery efforts based on impact severity.
Question 2: Which term refers to the maximum amount of time a business function can be unavailable before unacceptable consequences occur?
- Recovery Time Objective (RTO)
- Recovery Point Objective (RPO)
- Maximum Tolerable Period of Disruption (MTPD) (Correct answer)
- Minimum Business Continuity Objective (MBCO)
Correct answer: Maximum Tolerable Period of Disruption (MTPD)
The Maximum Tolerable Period of Disruption (MTPD) is the absolute maximum time a function can be disrupted before consequences become unacceptable to the organization.
Question 3: What does RPO (Recovery Point Objective) measure in the context of a BIA?
- The time needed to restore full operational capacity
- The maximum tolerable data loss measured in time (Correct answer)
- The minimum staffing level required during recovery
- The financial cost of a disruption per hour
Correct answer: The maximum tolerable data loss measured in time
RPO defines the maximum tolerable amount of data loss measured in time, indicating how far back data must be recoverable after a disruption.
Question 4: Which BCI Good Practice Guidelines concept defines the minimum level of services or products that must be delivered after a disruption?
- Recovery Time Objective (RTO)
- Maximum Tolerable Period of Disruption (MTPD)
- Minimum Business Continuity Objective (MBCO) (Correct answer)
- Recovery Point Objective (RPO)
Correct answer: Minimum Business Continuity Objective (MBCO)
The Minimum Business Continuity Objective (MBCO) defines the minimum level of services or products that must be maintained or quickly restored to satisfy stakeholder expectations during recovery.
Question 5: In a Business Impact Analysis, what are 'dependencies'?
- Resources, processes, or relationships that a business function relies on to operate (Correct answer)
- External regulatory requirements that must be met during recovery
- Financial reserves set aside for disaster recovery funding
- Alternative suppliers identified during risk assessment activities
Correct answer: Resources, processes, or relationships that a business function relies on to operate
Dependencies are the resources, processes, people, technology, or relationships that a business function requires to perform its activities effectively.
Question 6: What is the required relationship between Recovery Time Objective (RTO) and Maximum Tolerable Period of Disruption (MTPD)?
- RTO must equal MTPD exactly
- RTO must be greater than MTPD
- RTO must be less than or equal to MTPD (Correct answer)
- There is no required relationship between RTO and MTPD
Correct answer: RTO must be less than or equal to MTPD
RTO must be less than or equal to MTPD, ensuring that recovery is achieved within the maximum tolerable disruption window.
Question 7: Who should provide input to the BIA to ensure the accuracy of impact data?
- Only senior executives and board members
- Only IT personnel and system administrators
- External auditors exclusively
- Process owners and key stakeholders within each business function (Correct answer)
Correct answer: Process owners and key stakeholders within each business function
Process owners and key stakeholders within each business function have the most accurate knowledge of operational impacts and are the primary sources for BIA data.
BCI Business Impact Analysis 1
What is the primary purpose of a Business Impact Analysis (BIA)?