Business Continuity and Disaster Recovery - Business Impact Analysis


Business impact analysis is a critical part of the business continuity planning process. This step quantifies data and gets into the real world issue of potential losses that can negatively impact your business. It is used to understand the most important impacts and how to best protect your people, processes, data, communications, assets and the organization's goodwill and reputation.

Organizations often think in terms of disaster recovery. Business continuity and the business impact analysis is more focused on keeping the business up and running and less focused on recovery after a disaster. The business impact analysis also is not focused only on the potential disasters, but on all potentially critical discontinuities. Key elements of the Business Impact Analysis are to identify critical business functions, establish the maximum acceptable outage time for each of these functions and then to determine the impact of not performing those functions. This can be measured against regulatory, legal, financial, operations or customer service requirements.

Once the adequacy of security and controls is evaluated and critical business functions and outage times are defined, the business continuity planner needs to develop an understanding of the probability of threats factored by the severity or impact and to start to develop a cost benefit analysis of the largest impact and highest probability threats.

It's virtually impossible to create an absolute value and prioritization of threats and impacts. Generally, a relational system is used to drive out the key priorities. Often, each threat is evaluated according to its probability and assigned a 1, 5 or 10 rating. Then, each threat is evaluated according to its impact on critical business functions and on the business overall. For example, a discontinuity in a critical business function of less than one hour might receive a value of 0. A discontinuity of one to eight hours might be ranked a 1, eight to twenty four hours might be ranked a 2 and over 24 hours might be ranked a 3. Obviously, these rankings need to be developed on a company specific basis. Probability factored by impact creates the relational prioritization list.

This approach to risk evaluation and control allows management to start to quantify the risks and potential impacts on the organization in a thoughtful and analytical way. This results not only in higher quality decisions, but also provides an audit trail that demonstrates that management is paying attention to its risk management responsibilities. These responsibilities might be established by regulatory or legal bodies, demanded as a contractual commitment by customers or simply expected by shareholders as sound and prudent management. The key corporate goals are to protect people, protect assets, protect data and to protect the brand and reputation of the organization.

About The Author

Robert Mahood has significant technology and management experience in data communications, internet, storage, disaster recovery and data recovery. He is currently the president of Midwest Data Recovery. www.midwestdatarecovery.com

bmahood@midwestdatarecovery.com, 312 907 2100 or 866 786 2595







Related News



Yes, there are still people not backing things up - B.C. Catholic Newspaper

Yes, there are still people not backing things up
B.C. Catholic Newspaper, Canada -Jul 4, 2008
I documented that failure in a column on data recovery. A hard drive in an otherwise reliable IBM Aptiva (won in an Internet contest from the Family ...

Open Source Data Recovery Tools To The Rescue - InformationWeek

Open Source Data Recovery Tools To The Rescue
InformationWeek, NY -Jun 24, 2008
No two data disasters unfold in quite the same way. To that end, you'll want to take the appropriate recovery action depending on what went wrong. ...

MelbourneComputers.Net offers PC upgrading, new PC setup, data ... - Ferret

MelbourneComputers.Net offers PC upgrading, new PC setup, data...
Ferret, Australia -Jun 30, 2008
Net offers an extensive range of hardware and software solutions including PC upgrades, new PC setup and data recovery and backup. ...

Restoring Deleted Files via Data Recovery Software - American Chronicle

Restoring Deleted Files via Data Recovery Software
American Chronicle, CA -Jul 3, 2008
So here is the way which is the result of present technology- data recovery software. This is the best way of saving our valuable day which we had spent in ...

New and Improved Image Recovery - 24-7PressRelease.com (press release)

New and Improved Image Recovery
24-7PressRelease.com (press release) -13 hours ago
No prior experience with data recovery, and no special skills or outstanding technical abilities are required. Convenience features include a full-featured ...


Recovering Data from the Most Reliable Storage-RAID - American Chronicle

Recovering Data from the Most Reliable Storage-RAID
American Chronicle, CA -Jul 4, 2008
To achieve the goals of better performance, scalability and data reliability and data recovery, RAID was thought to be designed by using several disks in ...

Data Recovery - Teknologibedriftenes Landsforening (TBL)

Data Recovery
Teknologibedriftenes Landsforening (TBL), Norway -Jul 3, 2008
Provides computer security, forensics and data recovery services for individuals and businesses including IT auditing, civil and criminal litigation. ...

Recovery Console repairing Windows Installation - American Chronicle

Recovery Console repairing Windows Installation
American Chronicle, CA -Jul 2, 2008
The size of the organization is not of concern for the value of Windows data recovery ie this remains uniform for all types of organizations. ...

PC Inspector File Recovery - Techtree.com

Techtree.com

PC Inspector File Recovery
Techtree.com, India -Jun 28, 2008
Therefore, you should already have a data recovery tool installed just in case you lose something later on. If you wait until after you lose something, ...

Dell Mobility Services Aim To Protect Laptop Data - CRN

The Tech Herald

Dell Mobility Services Aim To Protect Laptop Data
CRN, NY -Jun 30, 2008
"For hard drive data recovery, that can be upwards of $1000 for a point-of-need situation. If you have a hard drive that fails, we will send you a ...
Dell Unveils Notebook Security ServicesInformationWeek
Dell launches notebook security servicesThe Tech Herald
New Dell Services Help Users Hunt Down Missing LaptopsInvestor's Business Daily (subscription)
eWeek - NetworkWorld.com
all 77 news articles