O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

5.3. Evaluating Business Impact Analysis and the Requirements-Definition Processes

How do you determine if the recovery and continuity planning are sufficient to meet the needs of the business? One way is to review the process used to get to the plan for that recovery and assess if the proper steps were taken in making the decisions and determining if all of the relevant components have been considered in drafting the plans. The plans should be built around one or more of the loss scenarios used and determine what will be recovered, showing how extensive a loss was contemplated when the plan's development was contemplated. This will be very important for showing the extent of the anticipated recovery and management's commitment toward supporting the ongoing needs of the business in forming a due diligence perspective.

Business Impact Analysis (BIA) is a matter of looking at each subprocess and determining the impact to the rest of the operations if loss or impairment of that subprocess were to occur. The BIA also should be performed by determining what the impact to the business would be as the result of the potential disaster or disruption scenarios that are being contemplated. What would be affected if there was sudden and sustained loss of power to the facilities, for example? What would fail first and how far would the generators take you in continuing to provide service? This analysis goes hand in hand with a single point of failure assessment, a process used to identify ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required