Ronald Horne
ITT Online
5/24/15
The Business Impact Analysis (BIA) is the key concept used by the organization as a tool when developing Business Continuity Plans (BCP). The purpose of the BIA is to gather business information in an effort to understand the importance of the different functions of the organization (Johnson, R. (2011). It serves as the foundation for which an effective BCP can be developed and implemented. The BIA will identify and quantify business related impacts during a loss, disruption, or interruption of processes or functions within the organization. With effective implementation, the organization will be able to recover its operations under …show more content…
Component reliance is another term for dependency. Which processes are dependent on other functions and processes? The first place to look for dependencies is within the BIA components established during component prioritization. Begin by listing all of the components that your process and functions rely upon. After list has determined, the team should begin looking at processes where resilience may be external to the organization. For example, what would happen if you lost data from an external data warehouse? If you are analyzing data using analytics, can you continue without having the data warehouse?
The last part of dependency focuses on personnel. Can the organization’s personnel recover the system? Overlooking the personnel and critical staff required to recover systems can have devastating effect on RTO and RPO’s. Just because you have staffing does not mean they know how to recover in the event of disaster. For each of the critical processes and functions the organizations to ensure that key personnel are available to recovery of the process. …show more content…
Each process as part of the BIA should contain information as to who is responsible for managing and responding to the critical process. Starting with the basic information employees within the organization will need to be trained as to what processes and functions are considered critical to business operations. The inclusion of employee’s knowledge and their recognition of these processes will enable them to assist with recovery efforts. In addition to staff personnel any external entities that are a part of our recovery efforts will be briefed on their expectations.
References
Fisher, P. (n.d.). How to Conduct a Business Impact Analysis. Disaster RecoveryJournal. Retrieved May 23, 2015, from www.drj.com/article-archives/risk-analysis/how-to-conduct-a-business-impact-analysis.html
Johnson, R. (2011). Data Classification/Handling and Risk Management. Security policies and implementation issues (p. 278). Sudbury, Mass.: Jones & Bartlett Learning.
Linking Disaster Recovery Time Objectives to Business and Compliance Requirements. (n.d.). Sun Microsystems. Retrieved May 24 2015, from