NEXT STEPS

The BIA is completed when formalized senior management decisions have been made regarding (1) MTDs, (2) priorities for business unit and support services recovery, and (3) recovery resource funding sources. The next step is the determination of the most effective recovery alternative to be selected. The work gets a little easier here. We know what our recovery windows are, and we understand what our recovery priorities are. We now have to investigate and select recovery alternative solutions that fit the recovery window and recovery priorities expectations of the organization. Once the alternatives have been agreed upon, the actual recovery plans can be developed and tested, with organization personnel organized and trained to execute the recovery plans, when needed.

SUMMARY

The process of business continuity planning has matured substantially since the 1980s. No longer is BCP viewed as just a technological question. A practical and cost-effective approach toward planning for disruptions or disasters begins with the business impact assessment. Exhibit 3 depicts the BIA Route Map — a visual presentation of the process.

Exhibit 3.  

The goal of the BIA is to assist the management group in identification of time-critical processes, and in recognizing their degree of reliance upon support services (i.e., IT, voice and data networks, facilities, HR, etc.). Time-critical business processes are prioritized in terms of their maximum tolerable downtime, so that senior management can make reasonable decisions as to the recovery costs and time frames that they are willing to fund and support.

This chapter has focused on how organizations can facilitate the BIA process. Understanding and applying the various methods and techniques for gathering the BIA impact information will be the key to success.

Only when senior management formalizes their decisions regarding recovery time frames and priorities can each business unit and support service manager formulate acceptable and efficient plans for recovery of operations in the event of disruption or disaster. It is for this reason that the BIA process is so important when developing efficient and cost-effective business continuity plans.

Exhibit 4.