CompTIA Security+ Exam Prep

Answer: B - The correct order to create a Business Impact Analysis is to first identify critical processes, then assess the impact to those processes if a crisis were to happen, and then determine the maximum allowable outage and recovery times for each process.

By completing the steps of the Business Impact Analysis in the correct order, you are able avoid rework and can efficiently determine which business processes are critical and what order they should be restored in the event a crisis should occur. If these steps are performed out of order, then new information might require the team to re-do an earlier step, thus creating an inefficient use of the team’s time.