Bia Process
Business Impact Analysis
4.1 Overview
How to Complete a Risk Assessment in 5 Days or Less
4.2
BIA versus Risk Assessment
83
Business Impact Analysis
DisasterRecovery Time Line
Event
Normal
Response
Phase
Recovery
Phase
Restoration
Phase
Operations Emergency
Response
Team
Crisis Management Team
Restore Other
Applications
DamageAssessment
Team
Parallel Processing
Backup Activation
Recover Critical Apps and Systems
Return to Primary Site
Time
Figure 4.1
4.3
Disaster recovery time line
Creating a BIA Processfi
fi
fi
fi
fi
fi
fi
fi
fi
84
How to Complete a Risk Assessment in 5 Days or Less
Table 4.1
BIA Definitions Table
Category
If the Asset Was Unavailable:
Competitivedisadvantage
What would be the impact to our competitive standing?
Direct business loss
What would be the impact to our business revenues or
profits?
Loss of public
confidence or
reputationWhat would be the impact to our customer confidence,
our public image, shareholder or supplier loyalty?
Poor morale
What would be the impact to our employee morale
Fraud
What level ofgoods, services or funds be diverted?
Wrong management What would be the impact to management having access
decisions
to information to make informed business decisions?
Business disruption
Whatother applications, programs, systems, or business
processes would be impacted?
Legal liability
Could the organization be in breach of legal, regulatory,
or contractual obligations?
Privacyloss
Could our customers, clients, or employees suffer loss of
personal privacy information?
Safety risk — “Risk”
What would be the impact to our customers, clients, and
employee’s healthand safety?
4.4
Creating the Financial Impact Table
fi
ff
fi
efi
ff
fi
fi
fi
Requires hospitalization
Cuts, bruises requiring
first aid
Major exposure to unsafe
work...
Regístrate para leer el documento completo.