Which of the following should be completed FIRST?

A company has alerted planning the implemented a vulnerability management procedure. However, to security maturity level is low, so there are some prerequisites to complete before risk calculation and prioritization.

Which of the following should be completed FIRST?
A . A business Impact analysis
B . A system assessment
C . Communication of the risk factors
D . A risk identification process

View Answer

Answer: A

Explanation:

A business impact analysis (BIA) should be completed first before risk calculation and prioritization. A BIA is a process that identifies and evaluates the potential effects of disruptions to critical business functions or processes. A BIA helps to determine the recovery priorities, objectives, and strategies for the organization’s assets and resources1. A BIA is a prerequisite for risk calculation and prioritization because it provides the basis for estimating the impact and likelihood of various threats and vulnerabilities on the organization’s operations, reputation, and finances2.