The Business Impact Analysis (BIA) is developed as part of an organizations comprehensive contingency planning process.
The purpose of the BIA is to identify and prioritize system components by correlating them to the mission/business process(es) the system supports, and using this information to characterize the impact on the process(es) if the system were unavailable.
Working with input from users, managers, mission/business process owners, and other internal or external points of contact (POC), the personnel responsible for performing the BIA must identify the specific mission/business processes that depend on or support the information system, as well as estimating the downtime factors for consideration as a result of a disruptive event.
This course examines the essential processes and procedures required to perform a comprehensive Business Impact Analysis as part of an organizations broader and more comprehensive business and disaster recovery planning process.
After completing Part 3 of this course, participants will be able to:
- Identify specific impacts of essential business activities.
- Review essential business activities, the impact of their loss, and how effected operations will vary over the long term.
- Evaluate how each identified, essential activity relates to one another.
- Analyze the long-term impact for each essential business activity effected by the disruptive event.
- Gauge the resources you will need for both short and long term recovery.
- Establish a point system for grading the impact of each activity.
- Determine what needs to be done in terms of achieving a reasonable recovery time.
- Document the steps in performing a business impact analysis.
- Improve the quality of decision-making related to risk management and business/disaster recovery planning.
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.