Cis 462 Business Impact Analysis

Business Impact Analysis

Darryl E. Gennie

Professor Kevin Jayne

Augusta

CIS 462

23 August 2015

Strayer University

The purpose of a business impact analysis (BIA) is to assess the impact that a disruptive event would have on an organization. A BIA has three primary goals: determine criticality, estimate maximum downtime and evaluate resource requirements (FFIEC IT Examination Handbook, n.d.). Every critical business function must be identified as well as the impact of a disruption. Non-critical business functions may have a lower priority, but it is equally important to consider interdependencies between departments and functions. It is important for management to estimate the maximum amount of downtime that the organization can experience while still having functionality. They should also consider the maximum amount of time each critical process can experience before recovery becomes impossible. Finally, recovery efforts require evaluation of the necessary resources required to resume critical operations as quickly as possible (FFIEC IT Examination Handbook, n.d.). When addressing business functions and processes, it is important to

When considering the number of personnel, you must assign them to individual component recovery, starting with the most critical components first that are the most time sensitive. It is important to consider that while one person can be responsible for the recovery of multiple components which have different time constraints, but the most critical should be addressed by different individuals. You must factor in the amount of time it may require to recover these components and be prepared to pay overtime if necessary. Additionally, if there are components that cannot be recovered by your own personnel, you must factor in the cost of outsourcing recovery efforts (Johnson,