Conducting a Business Impact Analysis
Dave Carlson - February 25, 2008
The following outline was extracted from a generally accepted practices (GAP) document prepared by the Disaster Recovery Journal Editorial Advisory Board and the Disaster Recovery Institute International (Yelland, 2007). This outline can be used as the basis for conducting a business impact analysis (BIA). A BIA should be customized for a particular organization.
- Executive Sponsorship
- Gain executive management buy-in.
- Request executive management communication to all involved in BIA initiative.
- Understanding the Organization
- Identify business processes and functions.
- Get executive management validation of your understanding of the organization.
- BIA Tools
- Design custom BIA questionnaire.
- Determine operational impacts over time of each process and function disruption.
- Determine financial impacts over time of each process and function disruption.
- Determine and maximize recovery time objectives.
- Determine both internal and external business dependencies.
- Determine central depository for BIA data.
- BIA Process
- Gather BIA information using the most appropriate method for the organization.
- Explain the purpose of the BIA initiative to all involved.
- BIA Findings
- Obtain appropriate approval for individual BIA results.
- Prepare an analysis of BIA results.
- BIA Approval
- Obtain executive management approval of BIA summary and recovery priories.
- Prepare a presentation to give to executive management. Ensure no surprises.
- Be prepared to discuss the next steps to keep BIA current in the future.
- BIA Life Cycle
- Determine BIA review and update requirements.
- Communicate BIA review cycle to management, as appropriate.
- Determine audit trail for updates and records retention schedule.
Yelland, L. (Ed.). (2007). Generally accepted business continuity practices: A look at business continuity best practices. A joint project of Disaster Recovery Journal and Disaster Recovery Institute International. Retrieved February 18, 2008 from http://www.drj.com/GAP/