Part 3: Impact Over Time of Business Functions v2.0

From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to navigation Jump to search
BackBCM BIA.png
BCM Planning Methodology BIA.jpg
Part 3 BIA Questionnaires: Impact Over Time Of Business Functions

Part 3: Impact Over Time of Business Functions

Business Function and Function Code (Col 2 & 3)

Highest Impact Area (Col 4)

  • Highest-Impact Area refers to the impact area determined during Impact analysis in part 2 of the BIA

Impact Over Time (Col 5 to 16)

  • The timescale for a business function to be carried out on a normal day. You can consider it as to how long does it takes to do one transaction. Insert the appropriate timescale found in the BIA Questionnaire.
    • Example of a typical entry is “1” if the time scale is less than 4 hrs, “2” if less than 1 day. Refer to the scale found in Part 2.

Recovery Time Objective (RTO) (Col 17 to 18)

  • Sometimes referred to as Disaster Timescale or Crisis Timeline
  • During a disaster, would you be able to stretch the timescale during the delivering of this business function? Would your customer be able to bear with the delay?
    • Please make a personal judgment based on a “credible” Worst Case Disaster Scenario.
    • Could the business function be carried out over a longer period, possibly by using different means during a disaster?
    • Assume it is not possible to access your office location.

Maximum Tolerable Period of Disruption (MTPD) (Col 19 to 20)

  • Maximum Tolerable Period of Disruption or MTPD/MTPoD is the maximum allowable time that the organization’s key products or services is made unavailable or cannot be delivered before its impact is deemed as unacceptable.

Vulnerable Period (Col 21)

  • State the specific time e.g.
    • Month-end
    • Year-end
    • 25th of month
    • 4.30 pm daily
    • Not applicable
  • Specific when the business function is most vulnerable.
BackBCM BIA.png


Notes

  • Try to discourage answers such as “All day” and “Ad-hoc.”
  • Try to give a definitive date instead of a range. For example, no 5 to 7 days
  • Note that the key is to identify how much time it takes to complete a transaction and compare this with the time to be taken during a disaster.