Difference between revisions of "Business Impact Analysis (BIA)"

From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to navigation Jump to search
m
 
(9 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 
 
{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
 
{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
 
|-
 
|-
 
| '''1.''' Business Impact Analysis or BIA is a phase within the [[BCM_Planning_Process_or_Methodology|BCM planning process]]. It is the [[Process|process]] of analyzing the effect of interruptions to business operations or [[Process|processes]] on all [[Business_Function|business functions]].  
 
| '''1.''' Business Impact Analysis or BIA is a phase within the [[BCM_Planning_Process_or_Methodology|BCM planning process]]. It is the [[Process|process]] of analyzing the effect of interruptions to business operations or [[Process|processes]] on all [[Business_Function|business functions]].  
 
[[File:BCM Planning Methodology BIA.jpg|right|300px|BCM Planning Methodology]]
 
[[File:BCM Planning Methodology BIA.jpg|right|300px|BCM Planning Methodology]]
 
+
{{Template:BL-BCM-5Banner}}
Related Terms: [[Business_Impact_Analysis_Questionnaires_(BIAQ)|Business Impact Analysis Questionnaires (BIAQ)]], [[BCM_Planning_Process_or_Methodology|BCM Planning Process or Methodology]], [[DR_Planning_Process_or_Methodology|DR Planning Process or Methodology]].
+
'''Related Terms''': [[Business_Impact_Analysis_Questionnaires_(BIAQ)|Business Impact Analysis Questionnaires (BIAQ)]], [[BCM_Planning_Process_or_Methodology|BCM Planning Process or Methodology]], [[DR_Planning_Process_or_Methodology|DR Planning Process or Methodology]].
  
 
'''Note (1)''': The BIA should identify all [[Critical_Business_Functions_(CBF)|critical business functions]], qualify and/or quantify [[Loss|losses]] as a result of such interruptions, determine the tolerable downtime and minimum resources needed to [[Recover|recover]] the [[Critical_Business_Functions_(CBF)|critical business functions]].
 
'''Note (1)''': The BIA should identify all [[Critical_Business_Functions_(CBF)|critical business functions]], qualify and/or quantify [[Loss|losses]] as a result of such interruptions, determine the tolerable downtime and minimum resources needed to [[Recover|recover]] the [[Critical_Business_Functions_(CBF)|critical business functions]].
  
'''Note (2)''': Typically, for the first [[Business_Continuity_Planning_(BCP)|BCP]] [[Project|project]] the [[Organization|organization]] is involved in, all [[Business_Unit_(BU)|business units]] should be involved during the BIA. For subsequent [[Business_Continuity_Planning_(BCP)|BCP]] [[Project|projects]] and if there are no significant organizational changes, then only [[Business_Unit_(BU)|business units]] with [[Critical_Business_Functions_(CBF)|critical business functions]] will be involved.<br/> <br/> [[File:3D BCM Series BIA in the context of BCM books.jpg|thumb|left|140px|Conducting Your Impact Analysis For Business Continuity Planning]]<br/> {{BcmBoK 3 CL 2B}}<br/> <br/> {{BcmBoK 3 CL 2C}}<br/> <br/> {{BcmBoK 3 CL 2D}}<br/> <br/> [[File:WCCSG 2016 GooglePlus.jpg|thumb|right|300px|WCCSG 2016 GooglePlus.jpg]] [[File:2D A Managers Guide to ISO 22301 BCMS Dr Goh Moh Heng Web.jpg|thumb|left|140px|'''A Manager’s Guide to ISO 22301 Standard for Business Continuity Management System'''' (2014)]]<br/> <br/> <br/> <br/> '''Courses: Non-certification'''
+
'''Note (2)''': Typically, for the first [[Business_Continuity_Planning_(BCP)|BCP]] [[Project|project]] the [[Organization|organization]] is involved in, all [[Business_Unit_(BU)|business units]] should be involved during the BIA. For subsequent [[Business_Continuity_Planning_(BCP)|BCP]] [[Project|projects]] and if there are no significant organizational changes, then only [[Business_Unit_(BU)|business units]] with [[Critical_Business_Functions_(CBF)|critical business functions]] will be involved.<br/> <br/>  
  
*Attend: [https://www.bcm-institute.org/courses/business-continuity-management-courses-2/bcm-competency-courses/competency-level-300/bcm-310-assessing-risk-and-business-impact-requirements/ Classroom: Business Impact Analysis Courses]
+
<br/>
*Attend: [https://www.bcm-institute.org/courses/business-continuity-management-courses-2/bcm-competency-courses/competency-level-300/bcm-320-developing-business-continuity-strategies-and-plans/ Classroom: Competency-based Business Impact Analysis Courses]
+
{{Template:BCM Course}} {{BcmBoK 3 CL 2B}}
*Attend: [http://www.bcm-institute.org/courses/business-impact-analysis E-Learning: Business Impact Analysis module]
+
<br/> <br/> {{BcmBoK 3 CL 2C}}
 
+
<br/> <br/> {{BcmBoK 3 CL 2D}}
'''Courses: BCM Certification'''
 
 
 
*Attend: [https://www.bcm-institute.org/courses/business-continuity-management-courses-2/business-continuity-management-certification-courses/bcm-200-iso-22301-business-continuity-management-system-planner/ BCM-230: ISO22301 BCMS Planner] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-planner-bccp BCCP]
 
*Attend: [https://www.bcm-institute.org/courses/business-continuity-management-courses-2/business-continuity-management-certification-courses/bcm-300-iso-22301-business-continuity-management-system-implementer/ BCM-300: ISO22301 BCMS Implementer] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-specialist-bccs BCCS]
 
*Attend: [https://www.bcm-institute.org/courses/business-continuity-management-courses-2/business-continuity-management-certification-courses/bcm-400-iso-22301-business-continuity-management-system-manager/ BCM-400: ISO22301 BCMS Manager] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-expert-bcce BCCE]
 
*Attend: [https://www.bcm-institute.org/courses/business-continuity-management-courses-2/business-continuity-management-certification-courses/bcm-5000-iso-22301-business-continuity-management-system-expert-implementer/ BCM-5000: ISO22301 BCMS Expert Implementer] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-expert-bcce BCCE]
 
 
 
'''''Guidance Notes and Templates'''''
 
 
 
*[[Guidance_Notes_to_Complete_the_BIA_Questionaires|Guidance Notes to Complete the BIA Questionnaires]]
 
  
 +
{{Template:BLCoursesBanner}}
 +
{{Bcm Institute Source}}
 
|}
 
|}
  
{{Bcm Institute Source}}
+
{{Template:BookPSBIAleft}}
 
 
 
'''2.''' [[Process|Process]] of analyzing [[Activity|activities]] and the effect that a business [[Disruption|disruption]] might have upon them.
 
'''2.''' [[Process|Process]] of analyzing [[Activity|activities]] and the effect that a business [[Disruption|disruption]] might have upon them.
  
Line 35: Line 25:
  
 
'''3.''' [[Process|Process]] of analysing [[Critical_Business_Functions_(CBF)|business functions]] and the effect that a business [[Disruption|disruption]] might have upon them.
 
'''3.''' [[Process|Process]] of analysing [[Critical_Business_Functions_(CBF)|business functions]] and the effect that a business [[Disruption|disruption]] might have upon them.
 
+
{{Template: BookMGISOBCMSystem}}
 
{{NCEMA 7000 Source}}
 
{{NCEMA 7000 Source}}
  

Latest revision as of 11:57, 1 November 2020

1. Business Impact Analysis or BIA is a phase within the BCM planning process. It is the process of analyzing the effect of interruptions to business operations or processes on all business functions.
BCM Planning Methodology

Related Terms: Business Impact Analysis Questionnaires (BIAQ), BCM Planning Process or Methodology, DR Planning Process or Methodology.

Note (1): The BIA should identify all critical business functions, qualify and/or quantify losses as a result of such interruptions, determine the tolerable downtime and minimum resources needed to recover the critical business functions.

Note (2): Typically, for the first BCP project the organization is involved in, all business units should be involved during the BIA. For subsequent BCP projects and if there are no significant organizational changes, then only business units with critical business functions will be involved.


BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 2B: Intermediate (BC)



BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 2C: Intermediate (CM)



BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 2D: Intermediate (DR)

(Source: Business Continuity Management Institute - BCM Institute)

2. Process of analyzing activities and the effect that a business disruption might have upon them.

(Source: ISO 22301:2012 – Societal Security – Business Continuity Management Systems - Requirements) - clause 3.8

3. Process of analysing business functions and the effect that a business disruption might have upon them.

(Source: AE/HSC/NCEMA 7000:2012)

4. Process of analyzing business functions and the effect that a business disruption might have upon them.

(Source: British Standard BS25999-1:2006 Code of Practice for Business Continuity Management)

5. The process of determining the impacts on the organization due to interruptions to business operations or processes. The BIA should qualify and/or quantify losses as a result of such interruptions. Where possible, the loss impact should include both business disruption (number of days) and financial standpoints. BIA is determined without consideration for risk source, type or magnitude.

(Source: Singapore Standard 540 - SS 540:2008)

6. The management level analysis by which an organization assesses the quantitative (financial) and qualitative (non-financial) impacts, effects and loss that might result if the organization were to suffer a Business Continuity E/I/C. The findings from a BIA are used to make decisions concerning Business Continuity Management strategy and solutions.

(Source: Business Continuity Institute - BCI)

7. The process of analyzing all business functions and the effect that a specific disaster may have upon them. 1) Determining the type or scope of difficulty caused to an organization should a potential event identified by the risk analysis actually occur. The BIA should quantify, where possible, the loss impact from both a business interruption (number of days) and a financial standpoint. SIMILAR TERMS: Business Exposure Assessment, Risk Analysis.

(Source: Disaster Recovery Institute International / Disaster Recovery Journal - DRII/DRJ)

8. A management level financial analysis that identifies the impacts of losing an organization’s resources. The analysis measures the effect of resource loss and escalating losses over time in order to provide reliable data upon which to base decisions on mitigation, recovery, and business continuity strategies

(Source: ASIS International - ASIS International)

9. A management level analysis, which identifies the impacts of losing company resources. The BIA measures the effect of resource loss and escalating losses over time in order to provide senior management with reliable data upon which to base decisions on risk mitigation and continuity planning. (Associated terms:Business Impact Assessment,Business Impact Analysis Assessment).

(Source: HB 221:2004 Business Continuity Management)

(Source: Australia. A Practitioner's Guide to Business Continuity Management HB292 - 2006 )

10. A management level analysis that identifies the impacts of losing the entity's resources.

(Source: NFPA 1600 Standard on Disaster/Emergency Management and Business Continuity Programs, NFPA 1600:2007)

11. The process of analyzing the financial and non -financial impact due to a disruption on business operations. The BIA measures the effect of resource loss and escalating losses over time in order to provide top management with reliable data upon which to base decisions on Risk Mitigation and continuity planning.

(Source: Malaysia BCM Standard MS1970:2007)

12. A management level analysis, which evaluates the risks of disruption, including a consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.

NOTES:

  • The BIA measures the effect of capability loss, including escalating losses over time and effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery
  • Also referred to as business impact assessment.

(Source: AS/NZS 5050.1 Australian and New Zealand Standards for business continuity management.

Part 1: Business continuity management system specification)

13. A management level analysis, which evaluates the risks of disruption, including a consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.

NOTES:

  • The BIA measures the effect of capability loss, including escalating losses over time and

effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery

  • Also referred to as business impact assessment.

(Source: AS/NZS 5050.2 Australian and New Zealand Standards for business continuity management.

Part 2: Business continuity management practice standard)

14. An assessment of the minimum level of resources e.g. personnel, workstations, technology, telephony required, overtime, after a Business Continuity Incident to maintain the continuity of the organisation's Mission Critical Activities at a minimum level of service/production. The BIA measures the effect of resource loss and escalating losses over time in order to provide senior management with reliable data upon which to base decisions on risk mitigation and continuity planning. Generally considered to be part of a BIA it is an integral part of any subsequent resource Gap Analysis.

(Source: Business Continuity Institute - BCI)