Exam ISO-22301-Lead-Auditor Topic 2 Question 61 Discussion

Actual exam question for PECB's ISO-22301-Lead-Auditor exam
Question #: 61
Topic #: 2
Which of the following is an objective approach that assesses the organisational activities?

Suggested Answer: B Vote an answer

Explanation
Business Impact Analysis (BIA) is an objective approach that assesses the organisational activities and determines their criticality, dependencies, and recovery priorities. BIA is a key process in developing a business continuity management system (BCMS) according to ISO 22301. BIA helps to identify the potential impacts of disruptions to the organisation's critical functions and processes, such as financial losses, reputational damage, legal liabilities, regulatory penalties, customer dissatisfaction, etc. BIA also helps to determine the recovery time objectives (RTOs), recovery point objectives (RPOs), and minimum business continuity objectives (MBCOs) for each critical function and process. BIA provides the basis for developing business continuity strategies and plans that ensure the continuity and resilience of the organisation.
References:
ISO 22301 Auditing eBook, Chapter 2: Business Continuity Concepts and Principles, Section 2.3:
Business Impact Analysis1
ISO/TS 22317:2021(en), Security and resilience - Business continuity management systems - Guidelines for business impact analysis2

by Vanessa at Jul 08, 2026, 07:14 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10