Explanation/Reference:
Explanation:
A Business Impact Assessment (BIA) supports the mission of the organization by identifying the resources that are critical to an organization's ongoing viability and the threats posed to those resources. The BIA also assesses the likelihood that each threat will actually occur and the impact those occurrences will have on the business.
Incorrect Answers:
A: BIA is about critical business functions, and about technology.
C: While due care concerns using reasonable care to protect the interests of an organization, BIA is about supporting the mission of the organization.
D: BIA is about risk assessment. A BIA often takes place prior to a risk assessment. The BIA focuses on the effects or consequences of the interruption to critical business functions and attempts to quantify the financial and non-financial costs associated with a disaster. The business impact assessment looks at the parts of the organization that are most crucial.
References:
Stewart, James M., Ed Tittel, and Mike Chapple, CISSP: Certified Information Systems Security Professional Study Guide, 5th Edition, Sybex, Indianapolis, 2011, p. 825