Difference between revisions of "Business Impact Analysis (BIA)"

From BCMpedia. A Wiki Glossary for Business Continuity Management (BCM) and Disaster Recovery (DR).
Jump to navigation Jump to search
 
 
(15 intermediate revisions by 3 users not shown)
Line 1: Line 1:
{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px "
+
{| style="margin-left: 0px; text-align: left; font-style: none; width:100%; font-weight: none; background: #F0F0F0; border:1px"
| '''1.''' Business Impact Analysis or BIA is a phase within the [[BCM Planning Process or Methodology| BCM planning process]]. It is the [[process]] of analyzing the effect of interruptions to business operations or [[Process|processes]] on all [[Business Function|business functions]].
+
|-
 +
| '''1.''' Business Impact Analysis or BIA is a phase within the [[BCM_Planning_Process_or_Methodology|BCM planning process]]. It is the [[Process|process]] of analyzing the effect of interruptions to business operations or [[Process|processes]] on all [[Business_Function|business functions]].  
 +
[[File:BCM Planning Methodology BIA.jpg|right|300px|BCM Planning Methodology]]
 +
{{Template:BL-BCM-5Banner}}
 +
'''Related Terms''': [[Business_Impact_Analysis_Questionnaires_(BIAQ)|Business Impact Analysis Questionnaires (BIAQ)]], [[BCM_Planning_Process_or_Methodology|BCM Planning Process or Methodology]], [[DR_Planning_Process_or_Methodology|DR Planning Process or Methodology]].
  
[[Image:BCM Planning Methodology BIA.jpg|300px|right|BCM Planning Methodology]]
+
'''Note (1)''': The BIA should identify all [[Critical_Business_Functions_(CBF)|critical business functions]], qualify and/or quantify [[Loss|losses]] as a result of such interruptions, determine the tolerable downtime and minimum resources needed to [[Recover|recover]] the [[Critical_Business_Functions_(CBF)|critical business functions]].
  
Related Terms: [[Business Impact Analysis Questionnaires (BIAQ)]], [[BCM Planning Process or Methodology]], [[DR Planning Process or Methodology]].  
+
'''Note (2)''': Typically, for the first [[Business_Continuity_Planning_(BCP)|BCP]] [[Project|project]] the [[Organization|organization]] is involved in, all [[Business_Unit_(BU)|business units]] should be involved during the BIA. For subsequent [[Business_Continuity_Planning_(BCP)|BCP]] [[Project|projects]] and if there are no significant organizational changes, then only [[Business_Unit_(BU)|business units]] with [[Critical_Business_Functions_(CBF)|critical business functions]] will be involved.<br/> <br/>
  
'''Note (1)''': The BIA should identify all [[Critical Business Functions (CBF)|critical business functions]], qualify and/or quantify [[Loss|losses]] as a result of such interruptions, determine the tolerable downtime and minimum resources needed to [[recover]] the [[Critical Business Functions (CBF)|critical business functions]].
+
<br/>
 +
{{Template:BCM Course}} {{BcmBoK 3 CL 2B}}
 +
<br/> <br/> {{BcmBoK 3 CL 2C}}
 +
<br/> <br/> {{BcmBoK 3 CL 2D}}
  
'''Note (2)''': Typically, for the first [[Business Continuity Planning (BCP)|BCP]] [[project]] the [[organization]] is involved in, all [[Business Unit (BU)|business units]] should be involved during the BIA. For subsequent [[Business Continuity Planning (BCP)|BCP]] [[Project|projects]] and if there are no significant organizational changes, then only [[Business Unit (BU)|business units]] with [[Critical Business Functions (CBF)|critical business functions]] will be involved.
+
{{Template:BLCoursesBanner}}
<br><br>
+
{{Bcm Institute Source}}
[[Image:3D BCM Series BIA in the context of BCM books.jpg|thumb|left|140px|Conducting Your Impact Analysis For Business Continuity Planning [http://store.bcm-institute.org/books/bcm-specialist-series BUY!]]]
 
<br>
 
{{BcmBoK 3 CL 2B}}
 
<br><br>
 
{{BcmBoK 3 CL 2C}}
 
<br><br>
 
{{BcmBoK 3 CL 2D}}
 
<br><br>
 
[[Image:WCCSG 2016 GooglePlus.jpg|right|thumb|300px| [http://www.worldcontinuitycongress.com/wcc-singapore-2016/ Attend Asia Pacific largest BCM Conference - World Continuity Congress Singapore @ Marina Bay Sands May 11, 2016]]]
 
[[Image:2D A Managers Guide to ISO 22301 BCMS Dr Goh Moh Heng Web.jpg|thumb|left|140px|'''A Manager’s Guide to ISO 22301 Standard for Business Continuity Management System'''' (2014) [http://store.bcm-institute.org/books/bcm-manager-s-guide-specialist-series BUY!]]]
 
<br><br><br><br>
 
'''Courses: Non-certification'''
 
* Attend: [http://www.bcm-institute.org/courses/assessing-risk-and-business-impact-requirements Classroom: Business Impact Analysis Courses]
 
* Attend: [http://www.bcm-institute.org/courses/developing-business-continuity-strategies-and-plans Classroom: Competency-based Business Impact Analysis Courses]
 
* Attend: [http://www.bcm-institute.org/courses/business-impact-analysis E-Learning: Business Impact Analysis module]
 
'''Courses: BCM Certification'''
 
* Attend: [http://www.bcm-institute.org/courses/iso-22301-business-continuity-management-systems-bcms-planner BCM-230: ISO22301 BCMS Planner] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-planner-bccp BCCP]
 
* Attend: [http://www.bcm-institute.org/courses/iso-22301-business-continuity-management-systems-bcms-implementer BCM-300: ISO22301 BCMS Implementer] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-specialist-bccs BCCS]
 
* Attend: [http://www.bcm-institute.org/courses/iso-22301-business-continuity-management-systems-bcms-manager BCM-400: ISO22301 BCMS Manager] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-expert-bcce BCCE]
 
* Attend: [http://www.bcm-institute.org/courses/iso-22301-business-continuity-management-systems-bcms-expert-implementer BCM-5000: ISO22301 BCMS Expert Implementer] leading to [http://www.bcm-institute.org/certification/business-continuity-certified-expert-bcce BCCE]
 
 
 
'''''Guidance Notes and Templates'''''
 
* [[Guidance Notes to Complete the BIA Questionaires| Guidance Notes to Complete the BIA Questionnaires]]
 
 
|}
 
|}
{{Bcm Institute Source}}
 
 
[[Category:BCM Institute Glossary]]
 
[[Category:BCM Institute Crisis Communication Glossary]]
 
[[Category:BCM Institute DR Glossary]]
 
  
[[Category:BcmBoK 3 CL 2B]]
+
{{Template:BookPSBIAleft}}
[[Category:BcmBoK 3 CL 2C]]
+
'''2.''' [[Process|Process]] of analyzing [[Activity|activities]] and the effect that a business [[Disruption|disruption]] might have upon them.
[[Category:BcmBoK 3 CL 2D]]
 
 
 
'''2.''' [[Process]] of analyzing [[Activity|activities]] and the effect that a business [[Disruption|disruption]] might have upon them.
 
  
 
{{ISO 22301 Source}} - clause 3.8
 
{{ISO 22301 Source}} - clause 3.8
  
 
+
'''3.''' [[Process|Process]] of analysing [[Critical_Business_Functions_(CBF)|business functions]] and the effect that a business [[Disruption|disruption]] might have upon them.
'''3.''' [[Process]] of analysing [[Critical Business Functions (CBF)|business functions]] and the effect that a business [[Disruption|disruption]] might have upon them.
+
{{Template: BookMGISOBCMSystem}}
 
 
 
{{NCEMA 7000 Source}}
 
{{NCEMA 7000 Source}}
  
 
+
'''4.''' Process of analyzing business functions and the effect that a business [[Disruption|disruption]] might have upon them.
'''4.''' Process of analyzing business functions and the effect that a business [[disruption]] might have upon them.
 
  
 
{{BS25999 Source}}
 
{{BS25999 Source}}
  
 
+
'''5.''' The process of determining the impacts on the [[Organization|organization]] due to interruptions to business operations or [[Process|processes]]. The BIA should qualify and/or quantify [[Loss|losses]] as a result of such interruptions. Where possible, the loss [[Impact|impact]] should include both business [[Disruption|disruption]] (number of days) and financial standpoints. BIA is determined without consideration for risk source, type or magnitude.
'''5.''' The process of determining the impacts on the [[organization]] due to interruptions to business operations or [[Process|processes]]. The BIA should qualify and/or quantify [[Loss|losses]] as a result of such interruptions. Where possible, the loss [[impact]] should include both business [[disruption]] (number of days) and financial standpoints. BIA is determined without consideration for risk source, type or magnitude.
 
  
 
{{TR19 Source}}
 
{{TR19 Source}}
  
 
+
'''6.''' The management level analysis by which an [[Organization|organization]] assesses the quantitative (financial) and qualitative (non-financial) [[Impact|impacts]], effects and loss that might result if the [[Organization|organization]] were to suffer a [[Business_Continuity_(BC)|Business Continuity]] E/I/C. The findings from a BIA are used to make decisions concerning [[Business_Continuity_Management_(BCM)|Business Continuity Management]] strategy and solutions.
'''6.''' The management level analysis by which an [[organization]] assesses the quantitative (financial) and qualitative (non-financial) [[Impact|impacts]], effects and loss that might result if the [[organization]] were to suffer a [[Business Continuity (BC)|Business Continuity]] E/I/C. The findings from a BIA are used to make decisions concerning [[Business Continuity Management (BCM)|Business Continuity Management]] strategy and solutions.
 
  
 
{{BCI Source}}
 
{{BCI Source}}
  
 
+
'''7.''' The process of analyzing all business functions and the effect that a specific [[Disaster|disaster]] may have upon them. 1) Determining the type or scope of difficulty caused to an [[Organization|organization]] should a potential [[Event|event]] identified by the [[Risk_Analysis|risk analysis]] actually occur. The BIA should quantify, where possible, the [[Loss|loss]] [[Impact|impact]] from both a business interruption (number of days) and a financial standpoint. SIMILAR TERMS: Business Exposure Assessment, [[Risk_Analysis|Risk Analysis]].
'''7.''' The process of analyzing all business functions and the effect that a specific [[disaster]] may have upon them. 1) Determining the type or scope of difficulty caused to an [[organization]] should a potential [[event]] identified by the [[Risk Analysis|risk analysis]] actually occur. The BIA should quantify, where possible, the [[loss]] [[impact]] from both a business interruption (number of days) and a financial standpoint. SIMILAR TERMS: Business Exposure Assessment, [[Risk Analysis]].
 
  
 
('''Source:''' Disaster Recovery Institute International / Disaster Recovery Journal - DRII/DRJ)
 
('''Source:''' Disaster Recovery Institute International / Disaster Recovery Journal - DRII/DRJ)
  
 
+
'''8.''' A management level financial analysis that identifies the [[Impact|impacts]] of losing an [[Organization|organization’s]] resources. The analysis measures the effect of resource [[Loss|loss]] and escalating [[Loss|losses]] over time in order to provide reliable data upon which to base decisions on mitigation, recovery, and [[Business_Continuity_(BC)|business continuity]] strategies
'''8.''' A management level financial analysis that identifies the [[Impact|impacts]] of losing an [[Organization|organization’s]] resources. The analysis measures the effect of resource [[loss]] and escalating [[Loss|losses]] over time in order to provide reliable data upon which to base
 
decisions on mitigation, recovery, and [[Business Continuity (BC)|business continuity]] strategies
 
  
 
{{Asis Source}}
 
{{Asis Source}}
  
 
+
'''9.''' A management level analysis, which identifies the impacts of losing company resources. The BIA measures the effect of resource [[Loss|loss]] and escalating losses over time in order to provide senior management with reliable data upon which to base decisions on [[Risk|risk]] mitigation and continuity planning. (Associated terms:Business [[Impact|Impact]] Assessment,Business [[Impact|Impact]] Analysis Assessment).
'''9.''' A management level analysis, which identifies the impacts of losing company resources. The BIA measures the effect of resource [[loss]] and escalating losses over time in order to provide senior management with reliable data upon which to base decisions on [[risk]] mitigation and continuity planning. (Associated terms:Business [[Impact]] Assessment,Business [[Impact]] Analysis Assessment).
 
  
 
{{HB221 Source}}
 
{{HB221 Source}}
  
 
{{HB292 Source}}
 
{{HB292 Source}}
 
  
 
'''10.''' A management level analysis that identifies the impacts of losing the entity's resources.
 
'''10.''' A management level analysis that identifies the impacts of losing the entity's resources.
Line 91: Line 58:
 
{{NFPA Source}}
 
{{NFPA Source}}
  
 
+
'''11.''' The process of analyzing the financial and non -financial [[Impact|impact]] due to a [[Disruption|disruption]] on business operations. The BIA measures the effect of resource [[Loss|loss]] and escalating [[Loss|losses]] over time in order to provide top management with reliable data upon which to base decisions on [[Risk_Mitigation|Risk Mitigation]] and continuity planning.
'''11.''' The process of analyzing the financial and non -financial [[impact]] due to a [[disruption]] on business operations. The BIA measures the effect of resource [[loss]] and escalating [[Loss|losses]] over time in order to provide top management with reliable data upon which to base decisions on [[Risk Mitigation]] and continuity planning.
 
  
 
{{MS1970 Source}}
 
{{MS1970 Source}}
  
 +
'''12.''' A management level analysis, which evaluates the risks of disruption, including a consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.
  
'''12.''' A management level analysis, which evaluates the risks of disruption, including a
+
''NOTES:''
consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.
 
  
''NOTES:''
+
*The BIA measures the effect of capability loss, including escalating losses over time and effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery  
* The BIA measures the effect of capability loss, including escalating losses over time and effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery
+
*Also referred to as business impact assessment.  
* Also referred to as business impact assessment.
 
  
 
{{AS/NZS 5050.1 Source}}
 
{{AS/NZS 5050.1 Source}}
  
 +
'''13.''' A management level analysis, which evaluates the risks of disruption, including a consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.
  
'''13.''' A management level analysis, which evaluates the risks of disruption, including a
+
''NOTES:''
consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.
 
  
''NOTES:''
+
*The BIA measures the effect of capability loss, including escalating losses over time and  
* The BIA measures the effect of capability loss, including escalating losses over time and
+
 
effects on inter-dependencies, in order to provide senior management with reliable data upon
+
effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery
which to base decisions on risk treatment and planning for stabilization, continuity and
+
 
recovery
+
*Also referred to as business impact assessment.  
* Also referred to as business impact assessment.
 
  
 
{{AS/NZS 5050.2 Source}}
 
{{AS/NZS 5050.2 Source}}
Line 122: Line 86:
  
 
{{BCI Source}}
 
{{BCI Source}}
 +
 +
[[Category:BCM Institute Glossary]] [[Category:BCM Institute Crisis Communication Glossary]] [[Category:BCM Institute DR Glossary]] [[Category:BcmBoK 3 CL 2B]] [[Category:BcmBoK 3 CL 2C]] [[Category:BcmBoK 3 CL 2D]]

Latest revision as of 11:57, 1 November 2020

1. Business Impact Analysis or BIA is a phase within the BCM planning process. It is the process of analyzing the effect of interruptions to business operations or processes on all business functions.
BCM Planning Methodology

Related Terms: Business Impact Analysis Questionnaires (BIAQ), BCM Planning Process or Methodology, DR Planning Process or Methodology.

Note (1): The BIA should identify all critical business functions, qualify and/or quantify losses as a result of such interruptions, determine the tolerable downtime and minimum resources needed to recover the critical business functions.

Note (2): Typically, for the first BCP project the organization is involved in, all business units should be involved during the BIA. For subsequent BCP projects and if there are no significant organizational changes, then only business units with critical business functions will be involved.


BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 2B: Intermediate (BC)



BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 2C: Intermediate (CM)



BCMBoK Competency Level
BCMBoK 3: Business Impact Analysis CL 2D: Intermediate (DR)

(Source: Business Continuity Management Institute - BCM Institute)

2. Process of analyzing activities and the effect that a business disruption might have upon them.

(Source: ISO 22301:2012 – Societal Security – Business Continuity Management Systems - Requirements) - clause 3.8

3. Process of analysing business functions and the effect that a business disruption might have upon them.

(Source: AE/HSC/NCEMA 7000:2012)

4. Process of analyzing business functions and the effect that a business disruption might have upon them.

(Source: British Standard BS25999-1:2006 Code of Practice for Business Continuity Management)

5. The process of determining the impacts on the organization due to interruptions to business operations or processes. The BIA should qualify and/or quantify losses as a result of such interruptions. Where possible, the loss impact should include both business disruption (number of days) and financial standpoints. BIA is determined without consideration for risk source, type or magnitude.

(Source: Singapore Standard 540 - SS 540:2008)

6. The management level analysis by which an organization assesses the quantitative (financial) and qualitative (non-financial) impacts, effects and loss that might result if the organization were to suffer a Business Continuity E/I/C. The findings from a BIA are used to make decisions concerning Business Continuity Management strategy and solutions.

(Source: Business Continuity Institute - BCI)

7. The process of analyzing all business functions and the effect that a specific disaster may have upon them. 1) Determining the type or scope of difficulty caused to an organization should a potential event identified by the risk analysis actually occur. The BIA should quantify, where possible, the loss impact from both a business interruption (number of days) and a financial standpoint. SIMILAR TERMS: Business Exposure Assessment, Risk Analysis.

(Source: Disaster Recovery Institute International / Disaster Recovery Journal - DRII/DRJ)

8. A management level financial analysis that identifies the impacts of losing an organization’s resources. The analysis measures the effect of resource loss and escalating losses over time in order to provide reliable data upon which to base decisions on mitigation, recovery, and business continuity strategies

(Source: ASIS International - ASIS International)

9. A management level analysis, which identifies the impacts of losing company resources. The BIA measures the effect of resource loss and escalating losses over time in order to provide senior management with reliable data upon which to base decisions on risk mitigation and continuity planning. (Associated terms:Business Impact Assessment,Business Impact Analysis Assessment).

(Source: HB 221:2004 Business Continuity Management)

(Source: Australia. A Practitioner's Guide to Business Continuity Management HB292 - 2006 )

10. A management level analysis that identifies the impacts of losing the entity's resources.

(Source: NFPA 1600 Standard on Disaster/Emergency Management and Business Continuity Programs, NFPA 1600:2007)

11. The process of analyzing the financial and non -financial impact due to a disruption on business operations. The BIA measures the effect of resource loss and escalating losses over time in order to provide top management with reliable data upon which to base decisions on Risk Mitigation and continuity planning.

(Source: Malaysia BCM Standard MS1970:2007)

12. A management level analysis, which evaluates the risks of disruption, including a consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.

NOTES:

  • The BIA measures the effect of capability loss, including escalating losses over time and effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery
  • Also referred to as business impact assessment.

(Source: AS/NZS 5050.1 Australian and New Zealand Standards for business continuity management.

Part 1: Business continuity management system specification)

13. A management level analysis, which evaluates the risks of disruption, including a consideration of the impacts of capability loss over time and the needs for and inter-dependencies of resources.

NOTES:

  • The BIA measures the effect of capability loss, including escalating losses over time and

effects on inter-dependencies, in order to provide senior management with reliable data upon which to base decisions on risk treatment and planning for stabilization, continuity and recovery

  • Also referred to as business impact assessment.

(Source: AS/NZS 5050.2 Australian and New Zealand Standards for business continuity management.

Part 2: Business continuity management practice standard)

14. An assessment of the minimum level of resources e.g. personnel, workstations, technology, telephony required, overtime, after a Business Continuity Incident to maintain the continuity of the organisation's Mission Critical Activities at a minimum level of service/production. The BIA measures the effect of resource loss and escalating losses over time in order to provide senior management with reliable data upon which to base decisions on risk mitigation and continuity planning. Generally considered to be part of a BIA it is an integral part of any subsequent resource Gap Analysis.

(Source: Business Continuity Institute - BCI)