ITPEC FE Morning October 2022 Question 58
When a business continuity plan (BCP) is developed given the possibility of a system failure, which of the following is the item that is implemented as part of business impact analysis?
Explanation
Determining the maximum allowable downtime of the information system — the business impact analysis (BIA) measures how long an outage the business can bear.
The BIA is the analysis step at the start of BCP development. It identifies the critical business functions and the systems they depend on, estimates the damage an outage would cause as it lengthens, and from that sets the maximum tolerable downtime for each. That limit then drives the recovery time objectives and the choice of backup and recovery measures in the plan.
Answer (b)
Why not others:
- •(a) — training the people concerned in the alternate and recovery procedures is part of putting the finished plan into operation, not an analysis of impact
- •(c) — testing the BCP, by exercises and drills, checks the plan once it exists
- •(d) — revising the BCP as the internal and external environment changes is plan maintenance, the last part of the cycle
Key rule: The BIA comes first and answers "what matters most and how long can it be down?"; strategy, plan, training, testing and review all build on its answer.
Service Management · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.