1. ISO 22313:2020, Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301, Section 8.2.2, "Business impact analysis." This section details the information that needs to be collected for a BIA, such as impacts over time and dependencies. The successful collection of this data relies on well-structured data collection methods like questionnaires, which implicitly requires attention to detail (D), question types (C), and clarity (A, B).
2. Heng, G. M. (2006). Business Impact Analysis: A Case Study of a University. Communications of the IIMA, 6(3), Article 9. This academic case study discusses the BIA process, including the use of questionnaires for data collection. The methodology highlights the importance of structuring the questionnaire to gather specific details on critical processes and impact levels, supporting the need for a defined level of detail (D) and appropriate question types (C).
3. Elliott, D., Swartz, E., & Herbane, B. (2010). Business Continuity Management: A Crisis Management Approach (2nd ed.). Routledge. In Chapter 5, "Business Impact Analysis," the authors discuss data collection techniques. They emphasize that questionnaires must be carefully designed for clarity, ease of use, and the ability to capture both quantitative and qualitative data, which directly relates to conciseness (A), layout (B), and question types (C).