Business Imapct Analysis Steps

Question 1

Establish a BIA approach

Answer 1

Step 1
Agree on necessary approach to perform the BIA

Question 2

Identify critical resources

Answer 2

Step 2
Management must identify critical functions in the organization and which IT functions are required to perform them. Involves interviews with key personnel and documentation review.

Question 3

Define disruption impact

Answer 3

Step 3
Identify and evaluate the impact of a service disruption by its effect over time and the resources negatively affected.

Question 4

Establish recovery priority

Answer 4

Step 5
What task to address first.
Deals with Maximum tolerable downtime (MTD)
Mean time to repair (MTTR)

Question 5

Estimate losses

Answer 5

Step 4
Outlines a list of potential risks and events that could occur that would disrupt operations.

Uses the Annualized Rate of Occurrence (ARO)
And
Annualized loss expectancy (ALE)

Question 6

Implement BIA recommendations

Answer 6

Step 7
Senior management evaluates the comprehensive BIA report and implements corrective actions to reduce threats.

Question 6

Create BIA report

Answer 6

Step 6