02 — Capability · BC-830.10
Business Impact Analysis
Work out which processes the organization cannot do without, how long each can be down and what it depends on, so recovery effort goes where the damage would be.
- BIA
- Criticality Assessment
- Recovery Objectives
In scope
- Process criticality and recovery time objectives
- Dependency mapping to systems and suppliers and sites
- Minimum resource requirements for recovery
Out of scope
- Application criticality in the configuration record itself (see BC-740)
Decomposes into · 3
- BC-830.10.10Process Criticality AssessmentRank business processes by the harm their loss causes over time, and set the recovery time and point each one needs.
- BC-830.10.20Dependency MappingTrace each critical process to the systems, people, sites, suppliers and data it cannot run without.
- BC-830.10.30Minimum Operating RequirementsDefine the smallest set of people, places, tools and information that lets a critical process limp along until full recovery.