Exam CISM topic 1 question 392 discussion

The keyword is 'between' system. The BIA is a decomposition of critical business processes. The process describes interactions between systems in order to accomplish its goal. Thus why (A) is the answer. Rationale: B. Isn't the answer cause it classifies a single system. C. KPI shows trends, but not the interaction between systems. D. RTO states a time to be achieved, but not interaction between systems.

Developing a system classification scheme helps to understand the relationships between critical systems by determining the level of importance or criticality of each system. This allows organizations to prioritize resources and efforts in protecting and maintaining the systems that are most critical to the organization's operations. A classification scheme also helps to identify dependencies between systems and potential points of failure, which is important for incident response and disaster recovery planning.

Option A - BIA

A is the answer. Analyzing process the BIA evaluate systems interaction

BIA obviously

A. performing a business impact analysis (BIA).

A. performing a business impact analysis (BIA) would be the BEST way to understand the relationships between critical systems. A BIA provides a comprehensive understanding of an organization's critical systems, their interdependencies, and the potential impacts of their failure. By conducting a BIA, an organization can identify critical business processes and the systems and data that support them, and determine the order in which these systems and processes should be restored in the event of a disruption. This information is critical for developing effective business continuity and disaster recovery plans.

A business impact analysis (BIA) is used to identify an organization’s business processes, the interdependencies between processes, the resources required for process operation, and the impact on the organization if any business process is incapacitated for a time. Gregory, Peter H.; Gregory, Peter H.. CISM Certified Information Security Manager Bundle (p. 124). McGraw Hill LLC. Kindle Edition.

A. Performing a business impact analysis (BIA) is the BEST way to understand the relationships between critical systems. A business impact analysis is a systematic process that identifies an organization's critical business processes and the resources required to support them. By conducting a BIA, an organization can gain a comprehensive understanding of its critical systems and the relationships between them.

A is correct

relationship will be cleared by classification.