Audit glossary

Business impact analysis (BIA)

Working out which processes matter most and how fast they must recover.

CISA

A BIA identifies critical business processes, the impact of losing them over time, and the resources they depend on. It sets recovery priorities, RTOs and RPOs, and is the foundation of the continuity plan.

On the exam

The BIA comes before choosing recovery strategies. Business process owners, not IT, are the key source of information.

Related terms

Test yourself with today’s question of the day.