Preview

Project Part 2 Task 1: Introduction And Business Impact Analysis Plan

Best Essays
Open Document
Open Document
1134 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Project Part 2 Task 1: Introduction And Business Impact Analysis Plan
Project Part 2 Task 1: Introduction and Business Impact Analysis Plan
Ronald Horne
ITT Online
5/24/15

The Business Impact Analysis (BIA) is the key concept used by the organization as a tool when developing Business Continuity Plans (BCP). The purpose of the BIA is to gather business information in an effort to understand the importance of the different functions of the organization (Johnson, R. (2011). It serves as the foundation for which an effective BCP can be developed and implemented. The BIA will identify and quantify business related impacts during a loss, disruption, or interruption of processes or functions within the organization. With effective implementation, the organization will be able to recover its operations under
…show more content…
Component reliance is another term for dependency. Which processes are dependent on other functions and processes? The first place to look for dependencies is within the BIA components established during component prioritization. Begin by listing all of the components that your process and functions rely upon. After list has determined, the team should begin looking at processes where resilience may be external to the organization. For example, what would happen if you lost data from an external data warehouse? If you are analyzing data using analytics, can you continue without having the data warehouse?
The last part of dependency focuses on personnel. Can the organization’s personnel recover the system? Overlooking the personnel and critical staff required to recover systems can have devastating effect on RTO and RPO’s. Just because you have staffing does not mean they know how to recover in the event of disaster. For each of the critical processes and functions the organizations to ensure that key personnel are available to recovery of the process.
…show more content…
Each process as part of the BIA should contain information as to who is responsible for managing and responding to the critical process. Starting with the basic information employees within the organization will need to be trained as to what processes and functions are considered critical to business operations. The inclusion of employee’s knowledge and their recognition of these processes will enable them to assist with recovery efforts. In addition to staff personnel any external entities that are a part of our recovery efforts will be briefed on their expectations.

References
Fisher, P. (n.d.). How to Conduct a Business Impact Analysis. Disaster RecoveryJournal. Retrieved May 23, 2015, from www.drj.com/article-archives/risk-analysis/how-to-conduct-a-business-impact-analysis.html
Johnson, R. (2011). Data Classification/Handling and Risk Management. Security policies and implementation issues (p. 278). Sudbury, Mass.: Jones & Bartlett Learning.
Linking Disaster Recovery Time Objectives to Business and Compliance Requirements. (n.d.). Sun Microsystems. Retrieved May 24 2015, from

You May Also Find These Documents Helpful

  • Satisfactory Essays

    a.i. The mission-critical business systems and services that must be protected by this DRP are as follows: Payroll, Human Resource Data, POS backup media, and Web Servers and their services.…

    • 491 Words
    • 2 Pages
    Satisfactory Essays
  • Satisfactory Essays

    Data Classification Standards help Richman Investments to consistently define how this organization should handle and secure our various types of data. This report will focus on the internal use only data and how each of these domains are affected by these standards. Internal use only data refers to information that may or may not be confidential. It is imperative that our organization keep this information in house and away from the public and realize the Domains that need to be addresses with these rigid standards. The three standards that are at the top of the list for our company that will be directly affected are the User, Work Station, and LAN Domains.…

    • 789 Words
    • 4 Pages
    Satisfactory Essays
  • Satisfactory Essays

    The data classification policy is intended to provide a framework for classifying a company’s data based on its level of sensitivity. Data classification entails analyzing the data an organization retains, determining its importance and value, and then assigning it to a category. Data is classified to help determine baselines for security controls in that will be implemented to protect the data.…

    • 288 Words
    • 2 Pages
    Satisfactory Essays
  • Satisfactory Essays

    Plan Implemation

    • 352 Words
    • 2 Pages

    Maintenance: All staff involved should regularly review their responsibilities and partake in "trial and error" exercise every year. Though, is should be every quarter, to ensure the best quality. It is very influential the company to keep the employee list that is involved with the disaster recovery process modern and up-to-date. Changes occur regularly such as promotions, someone being let go, and resignation. All these changes must be noted in the recovery plan that way their roles can be delegated out to other employees.…

    • 352 Words
    • 2 Pages
    Satisfactory Essays
  • Powerful Essays

    Business processes comprise a set of sequential sub-processes or tasks, with alternative paths depending on certain conditions as applicable, performed to achieve a given objective or produce given outputs. Each process has one or more needed inputs. The inputs and outputs may be received from, or sent to other business processes, other organizational units, or internal or external stakeholders. Business processes are designed to be operated by one or more business functional units, and emphasize the importance of the “process chain” rather than the individual units.…

    • 1063 Words
    • 5 Pages
    Powerful Essays
  • Good Essays

    The key process are processes that have an impact on the success of an organization, processes deliver results that are directed towards measurable business goals, and making sure that the organization remains competitive like Global Bike Inc.…

    • 832 Words
    • 4 Pages
    Good Essays
  • Powerful Essays

    Diaster Recovery

    • 1993 Words
    • 8 Pages

    Disaster recovery plan (DRP) is the process an organization uses to recover access to their software, data, and/or hardware that are needed to resume the performance of normal, critical business functions after the event of either a natural disaster or a disaster caused by humans. While Disaster Recovery plans, or DRPs, often focus on bridging the gap where data, software, or hardware have been damaged or lost, one cannot forget the vital element of manpower that composes much of any organization. The nature of the interruption should determine how a business continuation plan is although the disaster recovery plan provides guidance and documentation upon which to base emergency response, resumption and recovery planning efforts; it is not intended to be a substitute for informed decision-making. Directors, managers and executives must identify services for which disruption will result in significant financial and/or operational losses. Constructing a plan and presenting it to executive management may satisfy the immediate need for having a documented plan; however, this is not sufficient if the goal is to have viable response, resumption, recovery, and restoration capabilities. In order to establish that capability, “plans and the activities associated with their maintenance, including training revisions and exercises, must become an integral part of the planning process” (http://www.csoonline.com).Developing a Disaster Recovery Plan that encompasses activities required to maintain a viable continuity capability ensures that a consistent planning methodology is applied including:…

    • 1993 Words
    • 8 Pages
    Powerful Essays
  • Better Essays

    According to Robert Bronner, banks were among the earliest adopters of information technology in the business world. The widely use of information technology in the bank system forced a new industry – the disaster recovery industry. Disaster recovery plan is an important part of bank business continuity plan. It is a processes or set of procedures that help firms prepare for disruptive events. The goal of the plan is recover and protect a business IT facilities, such as the network, document management system, and core system, in the disruptive events. Those events include both natural disaster such as earthquake and man-made disasters such as power outage. It is impossible that a bank can always avoid disasters, so the disaster recovery plan plays an important role after a bank suffer a disaster. With a careful plan will effetely help the bank to minimize downtime and data loss to ensure some level of organizational stability and an orderly recovery after a disaster will prevail. The Automated Clearinghouse Association was formed by 7 Philadelphia-based banks in the mid-1970s for the sole purpose focus on how to manage bank’s data recovery when bank’s computer systems go down. This group started the disaster recovery industry in 1987 by…

    • 2502 Words
    • 9 Pages
    Better Essays
  • Powerful Essays

    In today’s business world, businesses must strategically choose a methodology which is best suited for the company when unforeseeable haphazard’s cause economical disasters. In this case, a…

    • 1443 Words
    • 6 Pages
    Powerful Essays
  • Powerful Essays

    The next step is to identify the information requirements which are of particular relevance with respect to the business processes. Then we will need to identify the inherent IT risks as well as overall level of control which can be associated with the business process. To achieve this we identify: • recent changes in the business environment having an IT impact • recent changes to the IT environment, new developments, etc. • recent incidents relevant to the controls and business environment • IT monitoring controls applied by management • recent audit and/or certification reports • recent results of self assessments…

    • 52875 Words
    • 212 Pages
    Powerful Essays
  • Satisfactory Essays

    Speed Demons

    • 752 Words
    • 4 Pages

    It is important for any company to effectively manage Information System four most important inter-connected components i.e. People, Structure, Technology and Process in fulfilling organizational processing needs, improve efficiency and effectiveness with reducing cost and achieve its goal to deliver value to its customers.…

    • 752 Words
    • 4 Pages
    Satisfactory Essays
  • Satisfactory Essays

    Operational Management

    • 673 Words
    • 4 Pages

    A major storm or hurricane may have considerable impact on a company’s facilities and scheduling. Flooding and wind damage can make a facility unusable or significantly reduce its capacity. Stocks of raw materials, especially agricultural products, might be damaged or in short supply. The long-term availability of some materials might be significantly reduced. There may be a shortage of important services during the recovery. For example, the demand for roofers and builders is high after a major storm and they would like to be able to rapidly increase their capacity to handle the higher demand.…

    • 673 Words
    • 4 Pages
    Satisfactory Essays
  • Good Essays

    Chao Wang

    • 516 Words
    • 3 Pages

    2. Key Processes or Activities - Identify the key processes or activities required. You may need to investigate the “as is” processes (current situation) and then design the “to be” processes (desired situation) that may be required; particularly when new processes are being considered through a change management or process improvement initiative.…

    • 516 Words
    • 3 Pages
    Good Essays
  • Best Essays

    References: Venkatraman, N. (1999). Valuing the IS contributions to Business. Computer Sciences Corporation.. Ibrahim, M. S. et al. (2003). A review of disaster and crisis. Emeald Insight , 24-32. United Nations (1992). Internationally agreed glossary of basic terms related to Disaster Management. Geneva: Department of Humanitarian Affairs. Department of Irrigation & Drainage. (2007, October 14). Background. Retrieved February 27, 2011, from Laman Web Rasmi: http://www.water.gov.my/index.php?option=com_content&task=view&id=106&Itemid=508. Wikipedia, (2010), Emergency management. [Online] Available: http://en.wikipedia.org/wiki/Emergency_management (August 21, 2010) Tatum, M. (2010), What is Disaster Management? [Online] Available: http://www.wisegeek.com/what-isdisaster-managemnet.htm. (August 20, 2010). Ye, X., and Wen, J. (2009), Study on Disaster Risk Management Framework in Tourist Destination. In International Conference on Environmental Science and Information Application Technology. IEEE and Computer Society. Chatfield A T, Wamba S F & Tatano H.( 2010). E-Government Challenge in Disaster Evacuation Response: The Role of RFID. IEEE and Computer Society, 43rd Hawaii International Conference on System Sciences. pp.1-10. Post, J.E., and Altman, B.W. (1999). Managing the Environmental Change Process: Barriers and Opportunities. Journal of Organizational Change Management, Vol.4, pp.64-81. World Conference on Disaster Reduction, (2005). Hyogo Framework for Action 2005-2015. Kobe, Hyogo: UNISDR United Nations. Chen, L.-C., Liu, Y.-C., and Chan, K.-C. (2006). Intergrated Community-Based Disaster Managemnet Program in Taiwan: A Case Study of Shang-An Village. Natural Hazards, pp.209-23. Asian Disaster Reduction Center (ADRC),( 2011), Malaysia Country Report 2008. [Online] Available: "http://www.adrc.asia/countryreport/MYS/2008/malaysia2008.pdf” (January 5, 2011). Marchewka, J.T. (2010). Information Technology Project Management. Hoboken: John wiley & Sons, Inc. Careem, M., Silva, C. D., Silva, R. D., Raschid, L. and Weerawarana, S. (2007) Demonstration of Sahana: Free and Open Source Disaster Management. In Proceedings of the 8th Annual International Digital Government Research Conference. Careem, M., De Silva, C., De Silva, R., Raschid, L. and Weerawarana, S. (2006). Sahana: Overview of a disaster management system, Proceedings of the International Conference on Information and Automation, Colombo, Sri Lanka. Moe, T.L, Gebauer, F. And Senitz, S. (2007) Balanced scorecard for natural disaster management projects. Disaster Prevention and Management, Vol.16, pp.785-806. Khan, D.M. (1994). Summarized Sahih Al-Bukhari. In Ismail, M.A.-B. Sahih Al-Bukhari. Riyadh: Mataba Dar-us-Salam. pp.1079. .…

    • 4565 Words
    • 19 Pages
    Best Essays
  • Good Essays

    A Project Report Submitted in Partial Fulfillment of the Requirements In the Degree of Master of Arts in Disaster Management…

    • 12473 Words
    • 50 Pages
    Good Essays