Business Impact Analysis

What is this service?

The Business Impact Analysis (BIA) is about understanding ones business and analysis of the operational aspect of it and establishing what is critical for its persistence. Business Impact Analysis (BIA) is an essential step in the development of a contingency/disaster recovery plan.

Why is this services required?

BIA identifies the organization’s Mission Critical Activities (MCA), their dependencies and single points of failure taking into account the time sensitivity of each disruption, interruption or loss and this will determine the Recovery time objectives (RTO), Recovery Point Objectives (RPO) and the Level of Business Continuity (LBC). BIA is the foundation on which all Business Continuity Management is based. It is a linear process and consists of techniques and methodologies that can be used to identify, quantify and qualify the business impacts and their effects on an organization due to the loss, interruption or disruption of a MCAs. It further identifies the minimum level of resources required to enable an organization to achieve its RTO and RPO for an MCA. The key to BIA is the recognition that it needs to be conducted and analyzed in an end-to-end business service/product context.

Pre-requisites from the customer

  • All established process, sub processes, procedures including the resources (people, equipment, hardware, software, etc.) required to run these processes
  • Established and documented organization wide standards, policies and procedures
  • Top Management mandate to conduct the Business Impact Analysis

Customer Benefits

Typical benefits accruing to an organization as a result of Business Impact Analysis include the identification and documentation of:

  • Organization Functions (services and products)
  • End-End MCA (service and product context), their dependencies and single points of failure (including seasonal trends and/or critical timing issues)
  • Financial and non-financial impacts and effects (consequences) resulting from the disruption, interruption or loss of one or a number of MCA over various time periods.
  • The BCM objectives for each of the organizations MCA and their dependencies.
  • A prioritized minimum acceptable resource recovery configuration, overtime, that is required to enable a predefined minimum level of business continuity (LBC) of MCA and their dependencies.
  • Vital Records/Data (all media)
  • Key Customers, Clients and stakeholders
  • Suppliers (intra organization and/or Outsourced providers)
  • Constraints (contractual and other)

Scope Definition

  • The identification of scope for Business Impact Analysis

Information Gathering

  • Gather information regarding the Processes, sub-processes, procedure including the resources required to run these resources. Know if the organization complies to any specific international standard or self-developed organization wide best practices, standards and guidelines
  • Understand the organizational processes from a business perspective.
  • Study the organizational infrastructure and structure, financial and business processes, IT infrastructure and processes etc.


  • Prepare checklists
  • Conduct workshops
  • Review the filled checklists and prepare a questionnaire
  • Conduct Interviews
  • Documentation
  • Documentation of an organization’s mission critical activities.
  • Clearly defined RTO and RPO for mission critical activities
  • Clearly defined, documented and prioritized timeline of activities for the recovery of an organization’s Mission critical Activities
  • Clearly defined and documented resource recovery profile identifying the minimum level of resources required to achieve the prioritized recovery of Mission critical Activities and/or their dependencies.
  • Clearly defined multi-level business (financial and non-financial) Impact Analysis Matrix.


Business Impact Analysis Report: A detailed report of the Business impacts of the non availability of Mission Critical Activity(ies)

Send an Enquiry