|
The Business Impact Analysis, or BIA, is an information gathering process that,
among several steps, qualifies and quantifies the impacts of services-affecting
or disaster incidents for varied timeframes. The analyzed disaster impact information
helps to define the recovery and continuity objectives, such as the Maximum Allowable
Downtime (MAD), Recovery Timeframe Objective (RTO) and the Recovery Point Objective
(RPO). The BIA also identifies and maps business operations/processes to their interdependencies,
applications/systems and ancillary resources.
|
|
|
|
The BIA thoroughly scrutinizes - both quantitatively and qualitatively - the impacts
of not being able to perform our client's day-to-day business and/or technology
operations. The salient results of a BIA provide the foundation building blocks
for the development of the overall preparedness document, e.g., the BCP, DRP, COOP,
etc. During the BIA, we identify the business operations/processes and/or IT applications/systems
to be assessed. For each of these, we identify their:
|
|
|
|
|
Temporary and permanent financial and non-financial impacts of disaster incidents
for varied timeframe outages.
|
|
|
|
Legal and regulatory impacts of our client's inability to carry-out their operations
during timeframe outages.
|
|
|
|
Interdependencies (both internal and external). These include, applications/systems,
recovery resources (personnel, equipment, facilities, vendors, vital records, etc.,
and ancillary or other required resources/dependencies.
|
|
|
|
Workaround contingency options or procedures that may be used if the operation/process
or application owner's facility or technology became inoperable.
|
|
|
|
|
|
|
Armed with the collected and analyzed disaster impact information, our consultants
are able to define the recovery and continuity objectives, including:
|
|
|
|
|
|
The Maximum Allowable Downtime (MAD), which is an estimation of the maximum time
that can be tolerated as a result of a disruption.
|
|
|
|
The Recovery Timeframe Objective (RTO), which is the timeframe target number of hours
or days to recover operations/processes and/or applications following an outage,
e.g., one hour, 24 hours, three days, etc.
|
|
|
|
The Recovery Point Objective (RPO), which is the point in time to which systems
and data must be recovered after an outage, e.g., one hour prior to outage, end of
previous day's processing, etc.
|
|
|
|
|
|
The defined recovery objective information allows our consultants
to identify suitable backup and recovery strategies, i.e., strategies that will
achieve the BCP objectives.
|
|
|
|
TAMP Systems has more than 25 years of continuity planning expertise and know-how;
and has earned and maintains a CBCV certification from DRII, which is the world-wide
leader in more than 90 countries for education and certifications in business continuity
management. You can be rest assured that your plans will be usable, executable and
actionable by using TAMP for your Business Impact Analysis (BIA) needs.
|
