Please enable JavaScript.

Coggle requires JavaScript to display documents.

tewlvw by foue (BUSINESS IMPACT ANALYSIS (used to evaluate the critical…

- - - - obtained from the risk assessment results.
  - - - involves developing a detailed questionnaire and circulating it to key users in IT and end-user areas
        
        information gathered is tabulated and analyzed
    - - information gathered during these interview sessions is tabulated and analyzed for developing a detailed BIA plan and strategy
        
        BCP team should analyze past transaction volume in determining the impact to the business if the system were to be unavailable for an extended period of time.
    - - together in a room to come to a conclusion
        regarding the potential business impact of various levels of disruptions
        
        mixed group will quickly decide on the acceptable downtime and vital resources.
  - - - where the impact of a disruption increases the longer it lasts
      - Components
        
        cost of idle resources (e.g., in production) :free:
        
        drop in sales (e.g., orders) :arrow_down:
        
        financial costs (e.g., not invoicing nor collecting), :copyright:
        
        indirect costs (e.g., loss of market share,
        image and goodwill) :-1::skin-tone-5:
        
        delays (e.g., procurement) :alarm_clock:
    - - cost decreases with the target chosen for recovery time
      - Components
        
        costs of preparing and periodically testing the BCP :copyright:
        
        offsite backup premises :house:
        
        insurance coverage :notebook_with_decorative_cover:
        
        alternative site arrangements :desert:
    - - The organization pays for the cost of planning and implementation even if no disaster takes place.
    - - Variable costs will depend on the strategy implemented.
- - - - Such a method is called the annual loss expectancy (ALE)
      - risk-based analysis process, prioritizing critical systems can take place in developing recovery strategies.
  - - - functions cannot be performed unless they are replaced by identical capabilities
        
        Tolerance to interruption is very low; therefore, cost of interruption is very high
        
        cannot be replaced by
        manual methods.
    - - functions can be performed manually, but only for a brief period of time
        
        higher tolerance to interruption than with
        critical systems
        
        lower costs of interruption, provided that functions are restored within a certain time frame (usually five days or less).
    - - functions can be performed manually, at a tolerable cost and for an extended period of time
        
        can be performed manually, it usually is a difficult process and requires additional staff to perform.
    - - may be interrupted for an extended period of time, at little or no cost to the company
        
        require little or no catching up
        when restored.