Fill out Business Impact Analysis Questionnaire form

profilejimpop1998
W08A8W09A1.doc

Business Impact Analysis

Objectives

The purpose of the business impact analysis (BIA) is to identify which business units/departments and processes are essential to the survival of _ABC Marketing Firm_. The BIA will identify how quickly essential business units and/or processes have to return to full operation following a disaster situation. The BIA will also identify the resources required to resume business operations.

Business impacts are identified based on worst-case Scenario that assumes that the physical infrastructure supporting each respective business unit has been destroyed and all records, equipment, etc. are not accessible for 30 days. Please note that the BIA will not address recovery solutions.

The objectives of the BIA are as follows:

· Estimate the financial impacts for each business unit, assuming a worst case scenario.

· Estimate the intangible (operational) impacts for each business unit, assuming a worst-case scenario.

· Identify the organization’s business unit processes and the estimated recovery time frame for each business unit.

Policy

Each Facility Business Continuity Planner shall perform a BIA on all business processes to determine the criticality of these processes to _ ABC Marketing Firm_ and to determine what the impacts are to the organization if those processes were interrupted. It shall identify the business process availability Recovery Time Objectives (RTOs), business process Recovery Point Objectives (RPOs), key business processes and the associated risks if these processes were not available.

Scope

Each Facility within _ ABC Marketing Firm_ should have a Business Impact Analysis which includes each department and process located within the facility.

Business Impact Analysis Scores

The following number scores have been established to provide firm tangible and intangible exposure categories for cross-company comparison.

Cumulative Dollar Loss Ranges (Tangible)

Score

Loss Range

0

none

1

< $1,000

2

≥ $1,000 < $5,000

3

≥ $5,000 < $10,000

4

≥ $10,000 < $25,000

5

≥ $25,000 < $50,000

6

≥ $50,000 < $100,000

7

≥ $100, 000 < $150,000

8

≥ $150,000 < $250,000

9

≥ $250,000 < $500,000

10

≥ $500,000

Customer Service and Goodwill Loss Ranges (Intangible)

Score

Effect

0

None

2

Minimal

4

Moderate

6

Moderately Heavy

8

Heavy

10

Severe

Definitions

Impact Category

Definition

Loss of Revenue

Loss of income received from selling goods or services

Additional Expenses

Temporary staffing, overtime, equipment, services

Regulatory and Legal

Fines, penalties, compliance issues, contractual obligations, financial liabilities

Customer Service

Termination or reduction of service level (internal of external), live operators vs. automated response

Goodwill

Public image, shareholder relations, market share

Business Impact Analysis Questionnaire

Business Unit/Department Name:

Description of Business Unit/Department’s Purpose in the Organization:

Name of Unit/Department’s Manager/Director:

In the followings table, list the business processes performed by the Business Unit/Department

1.

Email

2.

Domain Access (Domain Controller)

3.

File/Print Sharing

4.

5.

6.

7.

8.

9.

10.

11.

12.

13.

For each business process listed above, fill out a questionnaire sheet.

Completed by: Date:

Business Impact Analysis Questionnaire

Business Unit/Department Name:

Business Process Name:

Business Function Description:

1. Does this Function have to be performed at a specific time of the day/week/month/year?

image1.wmf

No

CONTROL Forms.CheckBox.1 image2.wmf

Yes- If yes, state the requirement:

2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:

Cumulative Impact after Days:

Impact Category

1

3

5

10

20

30

Loss of revenue

 

 

 

 

 

 

Additional expenses

 

 

 

 

 

 

Regulatory and legal

 

 

 

 

 

 

Customer service

 

 

 

 

 

 

Goodwill

 

 

 

 

 

 

3. Is this function dependent on any technology (hardware or software):

image3.wmf

No

image4.wmf

Yes- If yes, list:

 

 

 

 

 

 

4. Does this function depend on any outside services or products for its successful completion?

image5.wmf

No

image6.wmf

Yes- If yes, list:

 

 

 

5. What is the maximum amount of time this business process could be unavailable?

Completed by: Date:

Business Impact Analysis Questionnaire

Business Unit/Department Name:

Business Process Name:

Business Function Description:

1. Does this Function have to be performed at a specific time of the day/week/month/year?

image7.wmf

No

CONTROL Forms.CheckBox.1 image8.wmf

Yes- If yes, state the requirement:

2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:

Cumulative Impact after Days:

Impact Category

1

3

5

10

20

30

Loss of revenue

 

 

 

 

 

 

Additional expenses

 

 

 

 

 

 

Regulatory and legal

 

 

 

 

 

 

Customer service

 

 

 

 

 

 

Goodwill

 

 

 

 

 

 

3. Is this function dependent on any technology (hardware or software):

image9.wmf

No

image10.wmf

Yes- If yes, list:

 

 

 

 

 

 

4. Does this function depend on any outside services or products for its successful completion?

image11.wmf

No

image12.wmf

Yes- If yes, list:

 

 

 

5. What is the maximum amount of time this business process could be unavailable?

Completed by: Date:

Business Impact Analysis Questionnaire

Business Unit/Department Name:

Business Process Name:

Business Function Description:

1. Does this Function have to be performed at a specific time of the day/week/month/year?

image13.wmf

No

CONTROL Forms.CheckBox.1 image14.wmf

Yes- If yes, state the requirement:

2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:

Cumulative Impact after Days:

Impact Category

1

3

5

10

20

30

Loss of revenue

 

 

 

 

 

 

Additional expenses

 

 

 

 

 

 

Regulatory and legal

 

 

 

 

 

 

Customer service

 

 

 

 

 

 

Goodwill

 

 

 

 

 

 

3. Is this function dependent on any technology (hardware or software):

image15.wmf

No

image16.wmf

Yes- If yes, list:

 

 

 

 

 

 

4. Does this function depend on any outside services or products for its successful completion?

image17.wmf

No

image18.wmf

Yes- If yes, list:

 

 

 

5. What is the maximum amount of time this business process could be unavailable?

Completed by: Date:

Current Network Diagram, physical values are listed as (P-) and daily virtual values are listed in (V-)

image19.emf

Cisco 892 ISR

Cisco Catalyst 2960S-48LPS-L -Switch

Windows Server 2008 R2

Exchange 2010

Red Hat Enterprise

Apache, PHP, MySQL

JBOSS

Windows Server 2008 R2

Primary Domain Controller and File Share

48 Desktop Computers

Windows 7 Ent

83 Laptop Computers

Windows 7 Ent

8 Tablets, Android OS17 Smart Phones

Android OS

192.168.0.3

192.168.0.5

192.168.0.4

192.168.0.200-248

192.168.0.100-183

192.168.0.50-58

192.168.0.75-92

192.168.0.1

192.168.0.2

P -$9423.00

V -$5,450.00

P -$7453.00

V -$5,875.00

P -$14,785.00

V -$84,650.00

P -$924.00

P -$2754.00

P -$1425.00 Each

P -$1274.00 Each

P -$399.00 Each

P -$199.00 Each

A Business Impact Analysis is a process used to determine the effect of an interruption of services on each business unit and the organization as a whole. The analysis can provide information on the short and long term effects of a disaster on such factors as profit, market share and goodwill.

This information in required to develop a business continuity strategy for the entire organization. Please fill out this questionnaire in as much detail as possible. Your input will be valuable in developing an effective Business Continuity program.

IT – AD Services and Email

Provides support of Active Directory Domain services and Exchange Email to the company

<Your Name Here>

<Your name here>

IT – AD Services and Email

Domain Access (Domain Controller)

IT – AD Services and Email

File and Print Sharing

IT – AD Services and Email

Email

_1577882083.unknown

_1577882087.unknown

_1577882089.unknown

_1577882090.unknown

_1577882088.unknown

_1577882085.unknown

_1577882086.unknown

_1577882084.unknown

_1577882079.unknown

_1577882081.unknown

_1577882082.unknown

_1577882080.unknown

_1577882077.unknown

_1577882078.unknown

_1577882075.unknown

_1577882076.unknown

_1577882073.unknown

_1577882074.unknown

_1445151528.vsd