Steps of a Business Impact Analysis Process

The majority of the work of a BIA is gathering the data surrounding the CBFs within the scope of the BIA. After the data has been gathered, it is analyzed. The end stage is the publication of the BIA report. Some organizations may want to include recommendations to meet recovery times, but that is not technically part of a BIA. Normally, recommendations for controls come after the BIA.

The overall steps of a BIA are:

  1. Identifying the environment
  2. Identifying stakeholders
  3. Identifying CBFs
  4. Identifying critical resources
  5. Identifying the MAO
  6. Identifying recovery priorities
  7. Developing the BIA report

Although these steps identify the actions to take, they can be combined or ordered differently. The most ...

Get Managing Risk in Information Systems, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.