StudyToCert

All certifications / SSCP / Lessons

ISC2 SSCP Oct 2025 outline · Domain 4: Incident response & recovery

Business impact analysis: MTD, RTO, RPO

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

A business impact analysis (BIA) is the study that tells an organization which business processes matter most and what happens to it when they stop. It is the foundation of both business continuity and disaster recovery planning: you cannot decide how much to spend on recovery until you know what an outage costs. The BIA looks at processes first, then maps them to the systems, people, facilities and suppliers they depend on.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SSCP for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SSCP study plan