Which Task is Included in the BIA Process?

Which of the following tasks is typically included in the BIA process?

Estimating the recovery time of systems Source Reference Answer
Identifying the communication strategy
Evaluating the risk management plan
Establishing the backup and recovery procedures
Developing the incident response plan

Community Votes

100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests the distinction between the analytical phase of continuity planning (BIA) and the operational phase (DRP/IRP), with the trap being confusing impact assessment with the implementation of recovery procedures.

The Business Impact Analysis (BIA) identifies critical business functions and quantifies the impact of disruptions to establish recovery metrics. Consensus confirms that estimating system recovery times to define Recovery Time Objectives (RTO) is a primary task within the BIA process.

Selecting 'Establishing the backup and recovery procedures' (Option D) is a common error because students often conflate the analysis of recovery needs with the actual technical implementation of backup solutions.

Community Discussion (3 comments)

9149f41 👍 3 Selected: A

Business Impact Analysis (BIA) = Recovery Time Objectives (RTO) + Recovery Point Objectives (RPO)

Anyio 👍 1 Selected: A

The correct answer is: A. Estimating the recovery time of systems Explanation: The Business Impact Analysis (BIA) process focuses on identifying and evaluating the effects of disruptions to critical business processes. Estimating Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) for systems is a key part of the BIA to determine how quickly systems need to be restored to minimize business impact. Other Options: B. Identifying the communication strategy: This is part of an incident response or disaster recovery plan, not typically part of the BIA. C. Evaluating the risk management plan: Risk evaluation falls under risk management, not the BIA process. D. Establishing the backup and recovery procedures: This is part of the disaster recovery plan, not the BIA. E. Developing the incident response plan: This is separate from the BIA and focuses on responding to security incidents.

saba263 👍 3 Selected: A

The Business Impact Analysis (BIA) is a core component of an organization's Business Continuity Planning (BCP) process. The BIA identifies and evaluates the potential effects of disruptions to critical business operations due to disasters, system failures, or other incidents.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

The Business Impact Analysis (BIA) is the process of identifying and prioritizing critical business functions and analyzing the potential impact of a disruption to those functions. Its primary goal is to determine the maximum acceptable downtime, which leads to the establishment of Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). Therefore, Option A is correct because estimating the recovery time is the fundamental activity used to derive these objectives.

Why the Other Options Are Wrong

Options B, D, and E describe the development of specific plans or procedures, which occur after the BIA is complete. Identifying communication strategies (B) is part of Crisis Communication Planning, while establishing backup procedures (D) belongs to Disaster Recovery Planning. Developing the Incident Response Plan (E) is a separate security domain focused on immediate reaction to breaches. Option C, evaluating the risk management plan, is a broader risk assessment activity, not the specific scope of a BIA which focuses strictly on business impact and recovery timeframes.

Community Comment Notes

Community comments strongly reinforce the formula 'BIA = RTO + RPO'. Users emphasize that the BIA is strictly about evaluation and identification of impacts, noting that it serves as the foundation for other plans but does not involve the creation of the plans themselves. The comments clarify that while BIA informs the strategies in other options, the act of estimating recovery time is the specific task contained within the BIA scope.

Official Reference

NIST SP 800-34 Rev. 1
https://www.nist.gov/publications/contingency-planning-guide-federal-information-systems

Exam Strategy

Remember that BIA is an analytical phase focused on identifying impact and setting metrics like RTO and RPO. If an option involves creating a plan, establishing procedures, or performing technical actions, it likely belongs to a later phase of Business Continuity or Disaster Recovery planning.

Related Analysis

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide