Deck 2: Business impact analysis (BIA)

Question 1

Both impact and probability can be mitigated.

Answer 1

True

Question 2

Which of the following can be impacted by an incident?

A)Employee morale
B)Brand
C)Facilities
D)Stakeholder confidence
E)All of the Above

Answer 2

Employee morale
Brand
Stakeholder confidence

Question 3

Protecting a company's brand should not be factored into the BIA since it is hard to quantify.

Answer 3

False

Question 4

While preparing your risk responses, additional risks are identified. What is correct course of action?

A)Add reserves to the business continuity project to accommodate the new risks and notify management
B)Document risk items and calculate expected monetary value based on probability and impact that result from the occurrences
C)Determine the risk events and associated cost. Then add the cost to project budget as reserve
D)Add contingency amount to the budget and notify customers.
E)All of the above

Question 5

What is the key to data collection via interviews in the BIA process?

A)Meet with as many people as possible
B)Consistent format
C)Never be late
D)Video tape the interview
E)Use a tabletop exercise

Question 6

Annualized rate of occurrence (ARO) is a measure of the magnitude of loss or impact on the value of an asset. It is expressed as a percent of asset value loss arising from a threat event.