Your team is developing a business impact analysis (BIA). You have identified the critical business functions (CBFs) and associated processes. What should you do next?

What is the primary tool used to ensure countermeasures are implemented?

Which of the following is not a best practice when performing a business impact analysis (BIA)?

True or False? The overall cost of a countermeasure can include training costs.

Which of the following is not a common category of control implementation?

Which factor most directly affects the scope of a business impact analysis (BIA)?

True or False? The chain of custody log should include the time, date, and name of the person who is receiving evidence.

What term refers to computers and devices that attackers control and from which they launch attacks?

True or False? In a MAC flood attack, attackers send hundreds of packets to the same switch port, preventing the switch from working properly.

True or False? Recommendations are rarely included in CBAs to enable readers to draw their own conclusions.