CBCI Exam Dumps : Certificate of the Business Continuity Institute (CBCI)

In CBCI 7.0 / BCI GPG 7.0 terminology, Business Impact Analysis (BIA) is the process used to understand and quantify how disruption affects an organization over time, so priorities, recovery strategies, and resource requirements can be set. The BCI explicitly describes BIA as defining impact tolerances and “the impacts over time” to determine response strategies, recovery priorities, and resource needs. This time-based impact view is what distinguishes BIA from other analyses: it helps determine when disruption becomes unacceptable (supporting concepts like MTPD) and what must be restored first.

“Risk and threat analysis” (D) focuses on causes, likelihood, vulnerabilities, and potential events—not primarily on time-phased impact. Cost-benefit analysis (C) helps evaluate financial viability of options, but it doesn’t analyse operational impact over time. “Recovery time analysis” (B) is not the standard named process in BCI’s framework; recovery time targets (like RTO) are outputs informed by BIA rather than replacing it. Therefore, the correct answer is A: Business Impact Analysis.

The CBCI 7.0 course explains that risk assessments fundamentally rely on evaluating the likelihood of risk occurrence and the consequences if they materialize. This probabilistic approach enables prioritization and treatment planning. Although risk assessments inform BIAs and regulatory compliance, their primary purpose is to analyze potential risks in terms of impact and probability to guide effective continuity strategies. Currency (timeliness) is important but secondary to the quality of likelihood and consequence evaluations, which form the basis of all risk decisions.

Within CBCI 7.0 (aligned to BCI GPG 7.0), validation includes exercising and testing to confirm the BCMS performs as intended and stays effective as the organization changes. Good practice is not to “set and forget” an exercise programme; it must be kept current as threats, dependencies, operating models, staffing, suppliers, technology, and locations evolve. The BCI explicitly states that exercises should be performed at planned intervals and when there are significant changes within the organization or the context in which it operates—this directly supports the need to review the exercise programme regularly at pre-defined intervals or after significant change.

Option A is partly true (exercise objectives should reflect BIA and solutions), but it doesn’t capture the key “effective programme” control: continuous review/update. Option B can help comparison, but repeating the same framework can also create predictability and miss emerging risks. Option D may inform scenarios, yet customer concerns alone should not drive the programme. The strongest CBCI-aligned answer is C.