What assesses potential loss that could be caused by a disaster?

What assesses potential loss that could be caused by a disaster?

• A. Risk assessment
• B. Business Impact Analysis (BIA)
• C. Continuity planning
• D. Disaster Recovery evaluation

Answer: (B)

Assessing potential loss caused by a disaster is what a Business Impact Analysis focuses on. It examines critical business processes, identifies dependencies, and estimates the consequences of disruption in terms of monetary impact, lost productivity, regulatory penalties, customer impact, and reputational damage. It also establishes how long the organization can function without each process (maximum tolerable downtime) and which resources are needed to recover, guiding recovery priorities and resource allocation. This direct emphasis on quantifying loss and prioritizing recovery makes it the best fit for the question. Risk assessment looks at threats, vulnerabilities, and the likelihood of events to build an overall risk picture rather than specifically quantifying disruption losses. Continuity planning develops strategies to keep operations going during a disruption, informed by the results of the analysis. Disaster recovery evaluation focuses on testing and evaluating the DR plan’s effectiveness rather than measuring potential losses from disruption.

Assessing potential loss caused by a disaster is what a Business Impact Analysis focuses on. It examines critical business processes, identifies dependencies, and estimates the consequences of disruption in terms of monetary impact, lost productivity, regulatory penalties, customer impact, and reputational damage. It also establishes how long the organization can function without each process (maximum tolerable downtime) and which resources are needed to recover, guiding recovery priorities and resource allocation. This direct emphasis on quantifying loss and prioritizing recovery makes it the best fit for the question.

Risk assessment looks at threats, vulnerabilities, and the likelihood of events to build an overall risk picture rather than specifically quantifying disruption losses. Continuity planning develops strategies to keep operations going during a disruption, informed by the results of the analysis. Disaster recovery evaluation focuses on testing and evaluating the DR plan’s effectiveness rather than measuring potential losses from disruption.