Which of the following phases establishes the identification and prioritization of critical systems and functions?

An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items.

Which of the following phases establishes the identification and prioritization of critical systems and functions?
A . Review a recent gap analysis.
B . Perform a cost-benefit analysis.
C . Conduct a business impact analysis.
D . Develop an exposure factor matrix.

View Answer

Answer: C

Explanation:

Reference: https://itsm.ucsf.edu/business-impact-analysis-bia-0

According to NIST SP 800-34 Rev. 1, a business impact analysis (BIA) is a process that identifies and evaluates the potential effects of natural and man-made events on organizational operations. The BIA enables an organization to determine which systems and processes are essential to the organization’s mission and prioritize their recovery time objectives (RTOs) and recovery point objectives (RPOs).12