142 • Supply Chain Risk Management: An Emerging Discipline
dependencies. Analysis of the data gathered through these interviews
paints a picture of the critical paths within a business at any given time.
is step also identies the business threshold for disruption loss, includ-
ing applications, systems, platforms, and infrastructure.
e business impact analysis identies the preliminary recovery time
objective (RTO)
3
and recovery point objective (RPO).
4
It is important to
remember when designing a business continuity solution that it is not
restoring business to normal, but it is the restoration of what is most cru-
cial at a given time. For example, if the company issued payroll the day
previous to an “event,” restoring the payroll process ...