Business Continuity and Disaster Recovery - Business Impact Analysis

Business impact analysis is a critical part of the business continuity planning process. This step quantifies data and gets into the real world issue of potential losses that can negatively impact your business. It is used to understand the most important impacts and how to best protect your people, processes, data, communications, assets and the organization's goodwill and reputation.

Organizations often think in terms of disaster recovery. Business continuity and the business impact analysis is more focused on keeping the business up and running and less focused on recovery after a disaster. The business impact analysis also is not focused only on the potential disasters, but on all potentially critical discontinuities. Key elements of the Business Impact Analysis are to identify critical business functions, establish the maximum acceptable outage time for each of these functions and then to determine the impact of not performing those functions. This can be measured against regulatory, legal, financial, operations or customer service requirements.

Once the adequacy of security and controls is evaluated and critical business functions and outage times are defined, the business continuity planner needs to develop an understanding of the probability of threats factored by the severity or impact and to start to develop a cost benefit analysis of the largest impact and highest probability threats.

It's virtually impossible to create an absolute value and prioritization of threats and impacts. Generally, a relational system is used to drive out the key priorities. Often, each threat is evaluated according to its probability and assigned a 1, 5 or 10 rating. Then, each threat is evaluated according to its impact on critical business functions and on the business overall. For example, a discontinuity in a critical business function of less than one hour might receive a value of 0. A discontinuity of one to eight hours might be ranked a 1, eight to twenty four hours might be ranked a 2 and over 24 hours might be ranked a 3. Obviously, these rankings need to be developed on a company specific basis. Probability factored by impact creates the relational prioritization list.

This approach to risk evaluation and control allows management to start to quantify the risks and potential impacts on the organization in a thoughtful and analytical way. This results not only in higher quality decisions, but also provides an audit trail that demonstrates that management is paying attention to its risk management responsibilities. These responsibilities might be established by regulatory or legal bodies, demanded as a contractual commitment by customers or simply expected by shareholders as sound and prudent management. The key corporate goals are to protect people, protect assets, protect data and to protect the brand and reputation of the organization.

About The Author

Robert Mahood has significant technology and management experience in data communications, internet, storage, disaster recovery and data recovery. He is currently the president of Midwest Data Recovery. www.midwestdatarecovery.com

bmahood@midwestdatarecovery.com, 312 907 2100 or 866 786 2595

In The News:


pen paper and inkwell


cat break through


Disaster Recovery- Managing the Risk

Helping your business survive in the event of an unforeseen... Read More

Business Continuity and Disaster Recovery - A Business Not a Technology Issue

Hackers, hurricanes, fires, flooding, power outages, denial of service attacks,... Read More

Avoiding Hard Disk Data Recovery Services

As a home computer owner, one of the greatest threats... Read More

Business Continuity and Disaster Recovery - Selecting A Business Continuity Strategy

The risk analysis and business impact analysis have identified risks... Read More

Did You Loose Your Windows XP Password? What Should You Have Done Before it Happened?

There is a common problem that happens with lot of... Read More

The Best Data Recovery Choice For You

The best defense against a loss of data is a... Read More

3 Simple Steps To Organize Your Critical Online Home Based Business Directory

If You are running an Online Work at home Business... Read More

Learn How To Make Data Backup Over The Internet!

Why should you backup your data on the Internet?There are... Read More

The Seven Golden Rules Of Data Backups

Backups of company data are carried out for two main... Read More

Want To Beat The Odds? Disaster Recovery Planning is Essential

Statistics show two out of five businesses go out of... Read More

Is Your Backup Good Enough?

As someone who has seen quite a few hard drive... Read More

Backup 101 - How To Pick The Right Backup Software

Vision Backup 10 Enterprise is an advanced and easy-to-use backup... Read More

Read This Now: Its Not If You Will Lose Your Data, Its When Will You Lose Your Data

With Adware, SpyWare, E-Mail Viruses, Java Script Viruses and Hardware... Read More

5 RAID Data Recovery Prevention Tips

If you have spent the time to increase your computer's... Read More

Data Backup Solution: Why You Need a Backup Plan in Place ? Part 1

Is a data backup solution part of your computer plans?... Read More

Its All In The Planning - Surviving Disaster

ITS ALL IN THE PLANNING - PREPARING FOR THE UNTHINKABLE*... Read More

Business Continuity and Disaster Recovery - Risk Analysis and Control

In the risk evaluation phase, there are a number of... Read More

Data Recovery Processes

Six months ago my computer crashed. When I turned my... Read More

Big Time Disaster Recovery Solutions Available for the Little Guy

There was a time - not too long ago -... Read More

Online Data Backups for Newbies

How long have you been doing business online? Whether you... Read More

Data Backup for Beginners

It's 10pm. Do you know where your data is?Data. Small... Read More

Do I Really Need To Backup?

Okay, computers a machine, right? Okay, maybe not yours. You... Read More

Backup -- But Where To?

We all know we have to backup regularly, but those... Read More

Data Recovery: Beginners Tips

Right now you probably in a lot of mental pain,... Read More

9 Things to Look for when Considering Data Backup Solutions

It's one thing to loose data and money because of... Read More

How to Effectively Back Up Your Data

What to backup, and what to loseThe oldest "computer expression"... Read More

Business Continuity and Disaster Recovery - Business Impact Analysis

Business impact analysis is a critical part of the business... Read More

Computer Data Backup - Data Backup Solution Will Give You A Peace Of Mind

Imagine that you have been working on a file for... Read More

HasYour Computer Hard Drive Ever Crashed? Are You Challenged by Backups?

The following scenario's have probably been repeated thousands of times,... Read More

Business Continuity and Disaster Recovery - Reducing Your Risk Profile

Like all plans, there is an ultimate goal to achieve.... Read More

Data Recovery The Easy Way

If you aren't prepared in advance, you will most likely... Read More

3 Ways Computers Can Hurt Your Ministry - Part 1 - Ineffective Data Backups

Our computers have become almost indispensable ministry tools. What would... Read More

Data Recovery

Every person who uses a personal computer will eventually face... Read More