Business Impact Analysis (BIA)
The BIA is a structured interview conducted with business managers and department heads in order to collect, consolidate and analyze recovery requirements for your enterprise. Job # 1 is building the template with a standard set of questions, an outage scenario and a Recovery Tier chart. The two application recovery metrics collected are Recovery Time Objective (RTO) and Recovery Point Objective (RPO) along with the Maximum Tolerable Outage Duration (MTOD) for each department.
BIA Scope
The scope is determined by...
- Number of interviews conducted
- Interview length (determined by level of detail in the BIA template)
- Recovery areas included
- Application recovery requirements
- Work area recovery requirements
- Data Collection Strategy
- MS Excel versus a BCM system
BIA Considerations
Each BIA is tailored to the size of the client and the industry it is in. We will work with your project team to build the template and data points collected including items such as:
- Relative criticality of each department
- Business process profile
- Outage Impacts (Operational, Regulatory, Reputational etc.)
- Upstream/Downstream dependencies
Risk Assessment
It is recommended to include a Risk Assessment (RA) in conjunction with the BIA so that Single Points of Failure and critical risks can be identified. If not documented, current recovery capabilities are included to build a gap analysis against the BIA requirements .
