Performing a Business Impact Analysis for an IT Infrastructure
Overview
Answer the following questions, specific to the creation and focus of Business Impact Analysis as well as BCP documentation.
Lab Assessment Questions & Answers 1. What is the goal and purpose of a BIA? To identify which business units, operations and process are crucial to the survival of the business. A timeframe in which business functionality must be restored. Also identifies resources that will be necessary for business functionality. 2. Why is a business impact analysis (BIA) an important first step in defining a business continuity plan (BCP)? The BIA identifies the critical and non-critical functions of the business. The BIA provides timeframes for critical functions to resume, for the business to become functional. The BIA estimates the cost related to the failure such as loss of cash flow, salaries for critical employees to recovery from a failure, and the cost of new equipment. The BIA provides framework to build the BCP upon.
3. How do risk management and risk assessment relate to a business impact analysis for an IT infrastructure? Identification of risk is necessary to establish the impact it will have on the IT infrastructure. The assessment gives the risk a category and priority. The process of prioritizing helps to manage the risk of high impact and probability of occurring. 4. True or False - If the Recovery Point Objective (RPO) metric does not equal the Recovery Time Objective (RTO), you may potentially lose data or not have data backed-up to recover. This represents a gap in potential lost or unrecoverable data. False, the RPO could be 30 mins while the RTO could be 1 hour. The RPO depends upon the backup, if it occurs every day at 5pm, then no data would be lost. If the backup is every hour, then data not backed up prior to the outage would have the