CISA Practice Question: Order the steps for conducting a business impact…

Order the steps for conducting a business impact analysis (BIA) in the correct sequence.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Identify processes, then define recovery objectives, then assess impact, then prioritize, then document

BIA steps: identify processes, define recovery objectives, assess impact, prioritize, and document.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Identify processes, then define recovery objectives, then assess impact, then prioritize, then document
Why this is correct
This is the correct order because you must first identify the critical business processes, then define recovery objectives (like RTO and RPO) for each, assess the impact of disruption, prioritize based on criticality, and finally document the results.
✗
Assess impact, then prioritize, then identify processes, then define recovery objectives, then document
Why it's wrong here
This is incorrect because impact assessment cannot be performed without first knowing which processes exist and their recovery objectives; starting with impact assessment skips the foundational steps.
✗
Identify processes, then assess impact, then define recovery objectives, then prioritize, then document
Why it's wrong here
This is incorrect because recovery objectives (like RTO/RPO) must be defined before assessing impact, as they set the criteria for what level of impact is acceptable.
✗
Define recovery objectives, then identify processes, then assess impact, then prioritize, then document
Why it's wrong here
This is incorrect because you cannot define recovery objectives for processes you haven't yet identified; process identification is the logical first step.

Go deeper