Business Impact Analysis
PROC-006
Customer Data Processing
Operate · BIA Overview
1. Criticality
2. Time objectives
3. Impact scenarios
4. Dependencies
Criticality:
how critical this process is to the organisation. It sets its priority for recovery.
Criticality
Critical
High
Medium
Low
Type
Core
Support
Time objectives:
set RTO, RPO and MTPD from the Time Threshold list your administrator maintains, so values compare across processes and assets.
RTO
Recovery time objective
1 hour
4 hours
8 hours
1 day
1 week
RPO
Recovery point objective
15 min
1 hour
4 hours
1 day
MTPD
Maximum tolerable period of disruption
8 hours
1 day
1 week
Impact scenarios:
describe what happens as an outage lengthens. Each scenario has a severity and a time threshold.
Customer requests queue up
4h
Low
Onboarding and support stop
1d
Medium
Revenue loss, SLA breach
3d
High
Contract penalties, regulatory notification
1w
Critical
Dependencies:
record the assets, staff and third parties the process depends on. Suppliers get a criticality for this process, with a suggestion from their risk exposure and tier.
Assets
SAP S/4HANA
Critical
Azure SQL cluster
High
EDI gateway
Medium
Suppliers
CloudSecure SaaS
THRD-001
·
Tiers 1
·
Suggested: Critical
Critical
BIA Overview row
Type
Core
Criticality
Critical
RTO
8h
Earliest Impact
4h
Critical Assets
1