Note: This example was created using the Business Impact Analysis Tool, which is included in the Toolkit. Not all columns and pages are shown.
Business Impact Analysis Details Completion Guidance Business Impact Analysis Title:
Initial company-wide BIA
Short, descriptive title
Business Impact Analysis Scope:
All major departments of the business.
Describe the scope of the BIA e.g. organizational area, location, processes
Context of Business Impact Analysis:
Describe the general environment in which the analysis is carried out and internal and external factors affecting it
Version:
The company has grown significantly over the last 12 months and the amount of revenue being generated in some areas makes them more business-critical. Customer expectations have also increased. The legal framework is now more rigorous and the consequences of failure are more expensive. 1
Dated:
24 January 20xx
Date the analysis was carried out
Lead Analyst(s):
A. N. Other
Name and title of person(s) carrying out the BIA
Business Impact Analysis Participants:
Names and titles of people contributing to the BIA
Approval:
John Smith, Marketing Manager David Brown, Head of Human Resources Joanne Green, Customer Services Manager Daljit Singh, Finance Manager Jack Grimshaw, Head of Manufacturing Jason Hooper, Product Development Manager Jack Spielberg, Chief Operating Officer
Date Approved:
31 January 20xx
Date the analysis was approved
Start at Version 1
Name and title of approver
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Identification of Key Business Activities [List all of the key business activities within the scope of the analysis exercise and their requirements] Resources normally required for this activity to occur Ref.
Business activity
People
Information and data
1
Sales and Marketing
Head of Sales and Marketing Customer database 3 x sales representatives Marketing database 2 x marketing managers
2
Finance
Head of Finance 6 in team
Accounting database
3
Human Resources
Human Resources Manager 3 people in team 1 trainer
Employee records Training records Payroll data
4
Manufacturing
Manufacturing Manager 30 shop-floor staff
Process documentation Product sheets
5
Customer Services
Customer Services Manager 2 x CS Supervisors 12 CS representatives
Customer database Appointments information Product information
6
Product Development
7
Website sales
Head of Product Development 4 x product managers 2 x website developers
Product plans Product designs Testing information Product information Pricing
Buildings, work environment and associated utilities 6 desks in HQ building, power and HVAC
Facilities, equipment and consumables
3 desktop computers, 3 CRM system laptops with access to printer, Email copier, scanner and fax Internet access
7 desks in HQ building, power 7 desktop computers with and HVAC access to printer, copier, scanner and fax 5 desks in HQ building, power 5 desktop computers with and HVAC access to printer, copier, scanner and fax
Purpose-built manufacturing plant with limited office accomodation, significant power requirements 15 desks in HQ building, power and HVAC. Post room
ICT systems
2 desktop computers with access to printer, copier, scanner and fax 15 desktop computers with access to printer, copier, scanner and fax
5 desks in HQ building, power 6 desktop computers with and HVAC. Test area access to printer, copier, scanner and fax Hosted with third party 2 desktop computers with access to printer, copier, scanner and fax
Finance system Email Internet access HR system Email Payroll system Internet access eLearning system Manufacturing control system Limited access to email
CRM system Email Internet access Website admin Design software Email Internet access Content management system
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Impact of Disruption [For each key business activity assess the impact of unavailability over time in each area e.g. customers, finance]
Ref.:
Time 1 hour 3 hours 1 day 3 days 1 week 1 Month
Ref.:
Time 1 hour 3 hours 1 day 3 days 1 week 1 Month
Ref.:
Time 1 hour 3 hours 1 day 3 days 1 week 1 Month
1
Impact on staff or public well-being 1(low) to 5(high) 1 1 1 2 2 3
2
Impact on staff or public well-being 1(low) to 5(high) 1 1 1 2 2 3
3
Impact on staff or public well-being 1(low) to 5(high) 1 1 2 3 4 4
Business Activity: Impact of breaching legal or regulatory requirements 1(low) to 5(high) 1 1 1 1 1 1
Business Activity: Impact of breaching legal or regulatory requirements 1(low) to 5(high) 1 1 1 2 3 4
Business Activity: Impact of breaching legal or regulatory requirements 1(low) to 5(high) 1 1 2 2 3 4
Sales and Marketing
Damage to reputation 1(low) to 5(high) 1 1 1 2 2 3
Finance
Damage to reputation 1(low) to 5(high) 1 1 1 2 3 4
Human Resources
Damage to reputation 1(low) to 5(high) 1 1 1 2 2 3
Completed By:
Impact on financial viability 1(low) to 5(high) 1 1 2 2 2 4
Completed By:
Impact on financial viability 1(low) to 5(high) 1 1 2 3 4 4
Completed By:
Impact on financial viability 1(low) to 5(high) 1 1 1 2 2 3
John Smith, Marketing Manager Impact on product or service quality 1(low) to 5(high) 1 1 1 1 1 1
Daljit Singh, Finance Manager Impact on product or service quality 1(low) to 5(high) 1 1 1 1 2 2
Date:
Environmental damage 1(low) to 5(high) 1 1 1 1 1 1
Date:
Environmental damage 1(low) to 5(high) 1 1 1 1 1 1
David Brown, Head of Date: Human Resources Impact on product or service quality 1(low) to 5(high) 1 1 1 1 2 2
Environmental damage 1(low) to 5(high) 1 1 1 1 2 2
24 January 20xx
Total Score 6 6 7 9 9 13
24 January 20xx
Total Score 6 6 7 11 15 18
24 January 20xx
Total Score 6 6 8 11 15 18
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Key Business Continuity Targets Quick Definitions MTPD RTO MBCO RPO
time it would take for adverse impacts, which might arise as a result of not providing a product/service or performing an activity, to become unacceptable (see also MAO) period of time following an incident within which a)product or service must be resumed or b) activity must be resumed or c) resources must be recovered minimum level of services and/or products that is acceptable to the organization to achieve its business objectives during a disruption point to which information used by an activity must be restored to enable the activity to operate on resumption
[For each key business activity state the MTPD, RTO, MBCO and RPO]
Ref. 1
Business Activity Sales and Marketing
Maximum Tolerable Period of Disruption (MTPD) - when any one impact scores 4 or over 1 month
Recovery Time Objective (RTO) 1 month
Minimum Business Continuity Objective Recovery Point Objective (MBCO) (RPO) 50% of normal sales activity 1 week
2
Finance
1 week
3 days
Pay suppliers Receive payments
1 day
3
Human Resources
1 week
3 days
Basic enquiries service
1 week
4
Manufacturing
3 days
3 days
50% of normal capacity
1 day
5
Customer Services
3 days
3 days
Half of normal service level
1 day
6
Product Development
1 month +
1 month
Key products only
1 week
7
Website sales
1 day
3 hours
Normal service
As close to point of failure as possible
8
[Business Activity]
9
[Business Activity]
10
[Business Activity]
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Dependencies and Recovery Needs [For each key business activity list the dependencies at each time period, starting from the relevant RTO. Then calculate the total requirement across the time periods] [Note: where cells are automatically populated from other sections of the tool, make sure you expand the cells to show all of their contents.]
Requirements Per Business Activity Ref.:
1
Dependency People
Normal Requirement Head of Sales and Marketing 3 x sales representatives 2 x marketing managers Information and data Customer database Marketing database Buildings, work environment 6 desks in HQ building, power and associated utilities and HVAC Facilities, equipment and 3 desktop computers, 3 laptops consumables with access to printer, copier, scanner and fax ICT systems CRM system Email Internet access Transportation Commuting from home to work and back Sales visits by car Finance Expenses and payroll Partners and suppliers Telemarketing bureau
Ref.: Dependency People
2
Normal Requirement Head of Finance 6 in team Information and data Accounting database Buildings, work environment 7 desks in HQ building, power and associated utilities and HVAC Facilities, equipment and 7 desktop computers with consumables access to printer, copier, scanner and fax ICT systems Finance system Email Internet access Transportation Commuting from home to work and back Finance Access to company bank account to pay suppliers and employees Partners and suppliers Cloud accounting system providers Tax agency
Business Activity:
Sales and Marketing
1hr
Business Activity: 1hr
RTO:
3hrs
Finance
1 month 1day
RTO: 3hrs
1day
50% of normal sales activity
MBCO: 3 days
1 week
3 days
MBCO:
3 days Head of Finance 3 in team Accounting database 4 desks in HQ building, power and HVAC 4 desktop computers with access to printer, copier, scanner and fax Finance system Email Internet access Commuting from home to work and back Access to company bank account to pay suppliers and employees Cloud accounting system providers
1 week Head of Finance 3 in team Accounting database 4 desks in HQ building, power and HVAC 4 desktop computers with access to printer, copier, scanner and fax Finance system Email Internet access Commuting from home to work and back Access to company bank account to pay suppliers and employees Cloud accounting system providers
1 month Head of Sales and Marketing 2 x sales representatives 1 x marketing managers Customer database Marketing database 4 desks in HQ building, power and HVAC 2 desktop computers, 2 laptops with access to printer, copier, scanner and fax CRM system Email Internet access Commuting from home to work and back Sales visits by car Expenses and payroll Telemarketing bureau
Pay suppliers Receive payments 1 month Head of Finance 6 in team Accounting database 7 desks in HQ building, power and HVAC 7 desktop computers with access to printer, copier, scanner and fax Finance system Email Internet access Commuting from home to work and back Access to company bank account to pay suppliers and employees Cloud accounting system providers Tax agency
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Recovery Priority List [List the key business activities in order of recovery priority, together with the Recovery Time Objective and Minimum Business Continuity Objectives required] Priority Business Activity 1 Website sales
RTO 3 hours
MBCO Requirements at RTO Normal service
2
Finance
3 days
3
Human Resources
3 days
Pay suppliers Receive payments Basic enquiries service
4
Manufacturing
3 days
50% of normal capacity
5
Customer Services
3 days
Half of normal service level
6
Sales and Marketing
1 month
50% of normal sales activity
7
Product Development
1 month
Key products only
8 9 10