Business Continuity and Disaster Recovery - Business Impact Analysis


Business impact analysis is a critical part of the business continuity planning process. This step quantifies data and gets into the real world issue of potential losses that can negatively impact your business. It is used to understand the most important impacts and how to best protect your people, processes, data, communications, assets and the organization's goodwill and reputation.

Organizations often think in terms of disaster recovery. Business continuity and the business impact analysis is more focused on keeping the business up and running and less focused on recovery after a disaster. The business impact analysis also is not focused only on the potential disasters, but on all potentially critical discontinuities. Key elements of the Business Impact Analysis are to identify critical business functions, establish the maximum acceptable outage time for each of these functions and then to determine the impact of not performing those functions. This can be measured against regulatory, legal, financial, operations or customer service requirements.

Once the adequacy of security and controls is evaluated and critical business functions and outage times are defined, the business continuity planner needs to develop an understanding of the probability of threats factored by the severity or impact and to start to develop a cost benefit analysis of the largest impact and highest probability threats.

It's virtually impossible to create an absolute value and prioritization of threats and impacts. Generally, a relational system is used to drive out the key priorities. Often, each threat is evaluated according to its probability and assigned a 1, 5 or 10 rating. Then, each threat is evaluated according to its impact on critical business functions and on the business overall. For example, a discontinuity in a critical business function of less than one hour might receive a value of 0. A discontinuity of one to eight hours might be ranked a 1, eight to twenty four hours might be ranked a 2 and over 24 hours might be ranked a 3. Obviously, these rankings need to be developed on a company specific basis. Probability factored by impact creates the relational prioritization list.

This approach to risk evaluation and control allows management to start to quantify the risks and potential impacts on the organization in a thoughtful and analytical way. This results not only in higher quality decisions, but also provides an audit trail that demonstrates that management is paying attention to its risk management responsibilities. These responsibilities might be established by regulatory or legal bodies, demanded as a contractual commitment by customers or simply expected by shareholders as sound and prudent management. The key corporate goals are to protect people, protect assets, protect data and to protect the brand and reputation of the organization.

About The Author

Robert Mahood has significant technology and management experience in data communications, internet, storage, disaster recovery and data recovery. He is currently the president of Midwest Data Recovery. www.midwestdatarecovery.com

bmahood@midwestdatarecovery.com, 312 907 2100 or 866 786 2595


MORE RESOURCES:

Software to Offer Comprehensive Solutions for Hosted Disaster Recovery Sites Using
Al-Bawaba
The partnership between eHosting DataFort and Double-TakeĀ® Software, a leading provider of data recovery solutions, offer customers a single solution to ...

and more »


Data Recovery USB Memory Stick
I-Newswire.com (press release)
Pen drive data retrieval software is easy to use tool and restores deleted Microsoft word documents, stored songs, audio-video files, pictures, ...

and more »


Stellar Introduces CD DVD Data Recovery v3.0 with Additional DVD Media Support ...
NewDesignWorld (press release)
Gurgaon, Haryana, March 19, 2010 - Stellar Information Systems Limited - Today announced a major upgrade to its CD data recovery software, ...

and more »


Cairo Amman Bank implements advanced security protocols
AME Info
Cairo Amman Bank announced the finalization of its business continuity plan (BCP) and remote data recovery site (Technology Disaster Recovery Center), ...

and more »


Disk Doctors New Windows Data Recovery Software
TransWorldNews (press release)
Disk Doctors new Windows Data Recovery Software will recover deleted files as well as helping to recover files that may have been lost. ...

and more »


Bobsguide (press release)

UK SMEs in data recovery failure
CRN - UK
Some 600 SMEs from France, the UK and Germany took part in the study, which was carried out to gauge the differences in backup and data recovery practices ...
UK firms failing to backup dataComputer Business Review

all 17 news articles »


Spending to increase on disaster data recovery solutions
Purchasing.com
If you want to ask your peers in supply chain what they think about spending on disaster data recovery services and solutions, why not start a conversation ...
IT disaster recovery goldmineNetworkWorld.com

all 22 news articles »


VentureBeat

Google lures business with free backup and data recovery
StrategyEye
By Editorial Google is enticing business customers to its cloud-based Google Apps suite by offering automatic backup and data recovery at no extra cost. ...
Google adds free cloud 'backup' to Apps, feature that reduces risk of data lossTechRepublic (blog)
Google Introduces Disaster Proof Backup To Protect Apps DataeBrandz

all 55 news articles »


Computerworld

Achieving Rapid AIX Data Recovery for Credit Union Core Processing Applications
Computerworld
Continuous member service is an important deliverable for credit unions, and the continued growth in assets and members means that the impact of downtime is ...



Business of Seagate on the rise
viploan.co.uk
Remember when you require data disk drive recovery, Seagate has what you require to help you with a multitude of problems and among these data recovery for ...


Google News

home | site map | Links
© 2007