Bus Cont Plan&Disas Recov Plan 100
sbadugula
Chapter2.pptxChapter 2: Building the Business Case
Business impact analysis
BIA – analysis of the important functions that are essential for the operation of the business
Used to quantify financial value of each function to the business
Identify the risks to the most valuable functions
Mitigation actions to reduce likelihood of risks
BIA Benefits
Quantifying the tangible and qualify the intangible costs for loss
Identifying the most critical functions to protect
Pinpointing the critical resources
Determining the recovery time
Identifying the vitals records and the impact of their loss
Prioritizing the use of scarce resources
Tangible financial costs
Direct loss of revenue due to service interruption
Increased waste from spoilage of materials
Penalties levied by customers for late shipments
Legal penalties for not conforming to government regulations
Intangible costs
Loss of customer goodwill
Reduced confidence in the marketplace
Employee turnover caused by concern for viability
Damaged image in the community
Loss of confidence in the organization by stakeholders
Well-executed BIA
A well-executed BIA can provide valuable information to executive management about vulnerabilities:
Maximum acceptable outage (MAO)
Recovery time objective (RTO)
Recovery point objective (RPO)
Managing a BIA
Assign a sponsor for the project and their role is:
Work with Business Continuity Manager
Approved the project budget
Communicate to every department the importance of participation
Address any objections or questions
Approve the BIA report
BIA Data Collection
Identify who will receive the questionnaire
Develop the questionnaire
Provide training to small groups
Follow up with each department to ensure timely completion
Review responses
Conduct review meetings
Compile and summarize the BIA data
