Free ISACA CISM Actual Exam Questions - Question 1 Discussion
Question No. 1
Which of the following is the PRIMARY objective of a business impact analysis (BIA)?
Select one option, then reveal solution.
US
WD
Will D.
2026-02-20
The BIA’s main job is figuring out which processes are critical and need to bounce back first, so I’d say A makes the most sense here. Recovery priorities come before setting specific metrics like RPO. A
0
MX
Michael X.
2026-02-13
I think D can be ruled out since vulnerability analysis is more about risk assessment, not impact analysis. Between A and B, maybe the main goal is to identify what needs recovery first, which points to A? But does defining RPO come before or after that?
0
SX
Sarah X.
2026-01-29
Guessing A, since BIA is about impact assessment, not control checks or vulnerabilities.
0
HN
Haris N.
2026-01-28
It’s A, since BIA focuses on pinpointing which business functions are most critical.
0
SP
Sami P.
2026-01-17
It’s A because BIA’s core is setting what needs recovering first, not defining RPO.
0
SP
Sami P.
2026-01-15
Probably A
0