Compliance testing ensures that the organization's incident response processes align with established cybersecurity frameworks and policies. This methodology provides objective and reliable conclusions about the maturity of incident response capabilities.
* Judgmental Sampling (Option A):Relies on subjective judgment and is less reliable.
* Data Analytics Testing (Option B):Useful for identifying trends but may not assess process maturity comprehensively.
* Variable Sampling (Option C):Appropriate for statistical analysis but less effective in process maturity assessments.
Reference:ISACA CISA Review Manual, Job Practice Area 2: Information Systems Audit and Assurance.

A business impact analysis (BIA) is the process of identifying and assessing the potential impacts a disruption or incident could have on an organization. A BIA helps organizations understand and prepare for these potential obstacles, so they can act quickly and face challenges head-on when they arise. A BIA tells the organization what to expect when unforeseen roadblocks occur, so they can make a plan to get their business back on track as quickly as possible. Therefore, a BIA is the best option to anticipate the effects of a disaster.
References:
* 10: Business Impact Analysis (BIA): Prepare for Anything [2023] * Asana
* 11: Definition of Business Impact Analysis (BIA) - IT Glossary | Gartner Information Technology
* 12: Business impact analysis (BIA) is a method to predict the consequences of disruptions to a business, its processes and systems by collecting relevant data.