What is this service?
The Business Impact Analysis (BIA) is about understanding ones business and analysis of the operational aspect of it and establishing what is critical for its continuance.
...............................................................................................................................................................................................................................................................................................................................
Why is this services required?
BIA identifies the organisation's Mission Critical Activities (MCA), their dependencies and single points of failure taking into account the time sensitivity of each disruption, interruption or loss and this will determine the Recovery time objectives (RTO), Recovery Point Objectives (RPO) and the Level of Business Continuity (LBC). BIA is the foundation on which all Business Continuity Management is based. It is a linear process and consists of techniques and methodologies that can be used to identify, quantify and qualify the business impacts and their effects on an organisation due to the loss, interruption or disruption of a MCAs. It further identifies the minimum level of resources required to enable an organisation to achieve its RTO and RPO for an MCA. The key to BIA is the recognition that it needs to be conducted and analysed in an end-to-end business service/product context.
...............................................................................................................................................................................................................................................................................................................................
Pre-requisites from the customer
- All established process, sub processes, procedures including the resources (people, equipment, hardware, software, etc.) required to run these processes
- Established and documented organization wide standards, policies and procedures
- Top Management mandate to conduct the Business Impact Analysis
...............................................................................................................................................................................................................................................................................................................................
Customer Benefits
Typical benefits accruing to an organization as a result of Business Impact Analysis include the identification and documentation of
- Organisation aims, objectives and outputs (services and products)
- End-2-end MCA (service and product context), their dependencies and single points of failure (including seasonal trends and/or critical timing issues)
- Financial and non-financial impacts and effects (consequences) resulting from the disruption, interruption or loss of one or a number of MCA over various time periods.
- The BCM objectives for each of the organisations MCA and their dependencies.
- A prioritised minimum acceptable resource recovery configuration, overtime, that is required to enable a predefined minimum level of business continuity (LBC) of MCA and their dependencies.
- Vital Records/Data (all media)
- Key Customers, Clients and stakeholders
- Suppliers (intra organisation and/or Outsourced providers)
- Constraints (contractual and other)
...............................................................................................................................................................................................................................................................................................................................
Paramount Service delivery process
Paramount follows a highly effective methodology to help various organizations conduct Business Impact Analysis.
Scope Definition
- The identification of scope for Business Impact Analysis
Information Gathering
- Gather information regarding the Processes, sub-processes, procedure including the resources required to run these resources. Know if the organization complies to any specific international standard or self-developed organization wide best practices, standards and guidelines
- Understand the organizational processes from a business perspective.
- Study the organizational infrastructure and structure, financial and business processes, IT infrastructure and processes etc.
Analysis
- Prepare checklists
- Conduct workshops
- Review the filled checklists and prepare a questionnaire
- Conduct Interviews
Documentation
- Documentation of an organization's mission critical activities.
- Clearly defined RTO and RPO for mission critical activities
- Clearly defined, documented and prioritized timeline of activities for the recovery of an organization's Mission critical Activities
- Clearly defined and documented resource recovery profile identifying the minimum level of resources required to achieve the prioritized recovery of Mission critical Activities and/or their dependencies.
- Clearly defined multi-level business (financial and non-financial) Impact Analysis Matrix.
...............................................................................................................................................................................................................................................................................................................................
Deliverables
- Business Impact Analysis Report: A detailed report of the Business impacts of the non availability of Mission Critical Activity(ies)
|