Which of the following is MOST important for an organization to complete prior to developing its disaster recovery plan (DRP)?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
The correct answer is C. Business impact analysis (BIA).
Business impact analysis (BIA) is the process of identifying and evaluating the potential effects of disruptions to critical business functions as a result of a disaster or other disruptive event. The BIA identifies critical business processes, the systems and data that support those processes, and the impact of a disruption to those processes on the organization.
A disaster recovery plan (DRP) is a documented process that outlines how an organization will recover and restore its critical systems and data in the event of a disaster. Before developing a DRP, it is important to understand which business functions are critical and what the potential impact of a disruption to those functions might be. This is where the BIA comes in.
Without a BIA, it is difficult to determine which systems and data are critical to the organization, and what the potential impact of a disruption to those systems and data might be. A comprehensive IT inventory is certainly important, as is a risk assessment, but without an understanding of critical business functions and their dependencies, it is difficult to develop a DRP that will adequately protect the organization.
Therefore, completing a business impact analysis (BIA) is the most important step an organization can take prior to developing its disaster recovery plan (DRP).