Business Impact Analysis (BIA) is defined as?

• A. A formal assessment of financial impact in the event of a disaster.
• B. A plan for migrating to cloud services.
• C. A schedule for employee training on security policies.
• D. A list of the organization's assets, annotated to reflect the criticality of each asset to the organization.

Answer: (D)

The main idea behind a Business Impact Analysis is identifying what assets and processes are most critical to the organization and how their disruption would affect operations. A BIA results in a catalog of the organization’s assets, annotated to reflect the criticality of eachAsset to the business, which then guides recovery priorities, dependencies, and targets (like RTOs and RPOs). In practice, this means mapping processes to the systems, data, and resources they rely on and rating how severe the impact would be if those assets were unavailable.

That’s why the option describing a list of the organization’s assets annotated to reflect their criticality best matches what a BIA produces. The other choices describe narrower activities—financial impact assessment, cloud migration planning, or training schedules—that don’t capture the scope and purpose of a BIA.