Business Continuity Event Planning: Business Impact Analysis (BIA)
This is the second of two posts examining the ‘prepare’ step in building and managing a BCEM (Business Continuity Event Management) plan. In the previous post, we saw how understanding the business is critical to a business impact mitigation and process recovery. The activities discussed produce input for the business impact analysis, including:
- Business objectives
- Regulatory environment
- Critical processes
- Threats
- Process interdependencies
- Process vulnerabilities
Using this information, we can plan for inevitable process failures. The BIA uses business impact information and the probability of specific business continuity events to calculate levels of business risk. The end result of a BIA is a picture of the BCEM threat, vulnerability, mitigation, and response framework and how that framework reduces risk to levels acceptable to management.
See Business Continuity Event Planning: Business Impact Analysis (BIA) by Tom Olzak, Olzak on Business Continuity, CSO Security & Risk Online.
Tags: BIA, Business Continuity, Business Continuity Management, Business Impact Analysis, business impact assessment
