Comprehensive and Detailed
Understanding Business Impact Analysis (BIA):
A BIA assesses the effects of disruptions to an organization's operations.
It helps prioritize resources based on the potential impact of downtime, compliance issues, and critical processes.
Why Options B, C, and F are Correct:
B (Applicable contract obligations) → Many companies have legal and compliance obligations regarding downtime, availability, and SLAs. This information helps determine what risk levels are acceptable.
C (Costs associated with downtime) → BIA quantifies the financial impact of system failures. Knowing lost revenue, regulatory fines, and recovery costs helps in planning.
F (Critical processes) → Identifying core business processes allows an organization to prioritize recovery efforts and maintain operational continuity.
Why Other Options Are Incorrect:
A (Inventory details) → While useful for asset management, it does not directly impact business continuity planning.
D (Network diagrams) → These help in security architecture but are not directly related to the financial/business impact analysis.
E (Contingency plans) → BIA is performed before contingency planning to identify what needs protection.
Reference:
CompTIA SecurityX CAS-005 Official Study Guide: Business Impact Analysis (BIA) & Risk Management NIST SP 800-34: Business Continuity & Contingency Planning