Note: This example was created using the Business Impact Analysis Tool, which is included in the Toolkit. Not all columns and pages are shown.
Business Impact Analysis Details Completion Guidance Business Impact Analysis Title:
Initial company-wide BIA
Short, descriptive title
Business Impact Analysis Scope:
All major departments of the business.
Describe the scope of the BIA e.g. organizational area, location, processes
Context of Business Impact Analysis:
Describe the general environment in which the analysis is carried out and internal and external factors affecting it
Version:
The company has grown significantly over the last 12 months and the amount of revenue being generated in some areas makes them more business-critical. Customer expectations have also increased. The legal framework is now more rigorous and the consequences of failure are more expensive. 1
Dated:
24 January 20xx
Date the analysis was carried out
Lead Analyst(s):
A. N. Other
Name and title of person(s) carrying out the BIA
Business Impact Analysis Participants:
Names and titles of people contributing to the BIA
Approval:
John Smith, Marketing Manager David Brown, Head of Human Resources Joanne Green, Customer Services Manager Daljit Singh, Finance Manager Jack Grimshaw, Head of Manufacturing Jason Hooper, Product Development Manager Jack Spielberg, Chief Operating Officer
Date Approved:
31 January 20xx
Date the analysis was approved
Start at Version 1
Name and title of approver
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Identification of Key Business Activities [List all of the key business activities within the scope of the analysis exercise and their requirements] Resources normally required for this activity to occur Ref.
Business activity
People
Information and data
1
Sales and Marketing
Head of Sales and Marketing Customer database 3 x sales representatives Marketing database 2 x marketing managers
2
Finance
Head of Finance 6 in team
Accounting database
3
Human Resources
Human Resources Manager 3 people in team 1 trainer
Employee records Training records Payroll data
4
Manufacturing
Manufacturing Manager 30 shop-floor staff
Process documentation Product sheets
5
Customer Services
Customer Services Manager Customer database 2 x CS Supervisors Appointments information 12 CS representatives Product information
6
Product Development
7
Website sales
Head of Product Development 4 x product managers 2 x website developers
Product plans Product designs Testing information Product information Pricing
Buildings, work environment and associated utilities 6 desks in HQ building, power and HVAC
Facilities, equipment and consumables
Transportation
Finance
Partners and suppliers
Commuting from home to work and back Sales visits by car
Expenses and payroll
Telemarketing bureau
Finance system Email Internet access HR system Email Payroll system Internet access eLearning system Manufacturing control system Limited access to email
Commuting from home to work and back
Access to company bank account to pay suppliers and employees Operational expenses
Cloud accounting system providers Tax agency Occupational health provider Payroll bureau
Commuting from home to work and back
Operational expenses Petty cash
Wide range of component suppliers
CRM system Email Internet access Website admin Design software Email Internet access Content management system
Commuting from home to work and back
Operational expenses
Various commodity suppliers
Commuting from home to work and back
Operational expenses Partner with software Purchase of test components company
None
Operational expenses
3 desktop computers, 3 CRM system laptops with access to printer, Email copier, scanner and fax Internet access
7 desks in HQ building, power 7 desktop computers with and HVAC access to printer, copier, scanner and fax 5 desks in HQ building, power 5 desktop computers with and HVAC access to printer, copier, scanner and fax
Purpose-built manufacturing plant with limited office accomodation, significant power requirements 15 desks in HQ building, power and HVAC. Post room
ICT systems
2 desktop computers with access to printer, copier, scanner and fax 15 desktop computers with access to printer, copier, scanner and fax
5 desks in HQ building, power 6 desktop computers with and HVAC. Test area access to printer, copier, scanner and fax Hosted with third party 2 desktop computers with access to printer, copier, scanner and fax
Commuting from home to work and back
Website hosting company
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Impact of Disruption [For each key business activity assess the impact of unavailability over time in each area e.g. customers, finance]
Ref.:
Time 1 hour 3 hours 1 day 3 days 1 week 1 Month
Ref.:
Time 1 hour 3 hours 1 day 3 days 1 week 1 Month
Ref.:
Time 1 hour 3 hours 1 day 3 days 1 week 1 Month
1
Impact on staff or public well-being 1(low) to 5(high) 1 1 1 2 2 3
2
Impact on staff or public well-being 1(low) to 5(high) 1 1 1 2 2 3
3
Impact on staff or public well-being 1(low) to 5(high) 1 1 2 3 4 4
Business Activity: Impact of breaching legal or regulatory requirements 1(low) to 5(high) 1 1 1 1 1 1
Business Activity: Impact of breaching legal or regulatory requirements 1(low) to 5(high) 1 1 1 2 3 4
Business Activity: Impact of breaching legal or regulatory requirements 1(low) to 5(high) 1 1 2 2 3 4
Sales and Marketing
Damage to reputation 1(low) to 5(high) 1 1 1 2 2 3
Finance
Damage to reputation 1(low) to 5(high) 1 1 1 2 3 4
Human Resources
Damage to reputation 1(low) to 5(high) 1 1 1 2 2 3
Completed By:
Impact on financial viability 1(low) to 5(high) 1 1 2 2 2 4
Completed By:
Impact on financial viability 1(low) to 5(high) 1 1 2 3 4 4
Completed By:
Impact on financial viability 1(low) to 5(high) 1 1 1 2 2 3
John Smith, Marketing Manager Impact on product or service quality 1(low) to 5(high) 1 1 1 1 1 1
Daljit Singh, Finance Manager Impact on product or service quality 1(low) to 5(high) 1 1 1 1 2 2
Date:
Environmental damage 1(low) to 5(high) 1 1 1 1 1 1
Date:
Environmental damage 1(low) to 5(high) 1 1 1 1 1 1
David Brown, Head of Date: Human Resources Impact on product or service quality 1(low) to 5(high) 1 1 1 1 2 2
Environmental damage 1(low) to 5(high) 1 1 1 1 2 2
24 January 20xx
Total Score 6 6 7 9 9 13
24 January 20xx
Total Score 6 6 7 11 15 18
24 January 20xx
Total Score 6 6 8 11 15 18
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Key Business Continuity Targets Quick Definitions MTPD RTO MBCO RPO
time it would take for adverse impacts, which might arise as a result of not providing a product/service or performing an activity, to become unacceptable (see also MAO) period of time following an incident within which a)product or service must be resumed or b) activity must be resumed or c) resources must be recovered minimum level of services and/or products that is acceptable to the organization to achieve its business objectives during a disruption point to which information used by an activity must be restored to enable the activity to operate on resumption
[For each key business activity state the MTPD, RTO, MBCO and RPO]
Ref. 1
Business Activity Sales and Marketing
Maximum Tolerable Period of Disruption (MTPD) - when any one impact scores 4 or over 1 month
Recovery Time Objective (RTO) 1 month
Minimum Business Continuity Objective Recovery Point Objective (MBCO) (RPO) 50% of normal sales activity 1 week
2
Finance
1 week
3 days
Pay suppliers Receive payments
1 day
3
Human Resources
1 week
3 days
Basic enquiries service
1 week
4
Manufacturing
3 days
3 days
50% of normal capacity
1 day
5
Customer Services
3 days
3 days
Half of normal service level
1 day
6
Product Development
1 month +
1 month
Key products only
1 week
7
Website sales
1 day
3 hours
Normal service
As close to point of failure as possible
8
[Business Activity]
9
[Business Activity]
10
[Business Activity]
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Dependencies and Recovery Needs [For each key business activity list the dependencies at each time period, starting from the relevant RTO. Then calculate the total requirement across the time periods] [Note: where cells are automatically populated from other sections of the tool, make sure you expand the cells to show all of their contents.]
Total Requirement Ref.:
ALL
Completed By:
A. N. Other
Date:
3hrs 2 x website developers
1day 2 x website developers
3 days Head of Finance 3 in team Human Resources Manager 1 person in team Manufacturing Manager 15 shop-floor staff Customer Services Manager 1 x CS Supervisor 6 CS representatives 2 x website developers
1 week Head of Finance 3 in team Human Resources Manager 1 person in team Manufacturing Manager 15 shop-floor staff Customer Services Manager 1 x CS Supervisor 6 CS representatives 2 x website developers
Information and data
Product information Pricing
Product information Pricing
Accounting database Employee records Training records Payroll data Process documentation Product sheets Customer database Appointments information Product information Pricing
Accounting database Employee records Training records Payroll data Process documentation Product sheets Customer database Appointments information Product information Pricing
Buildings, work environment and associated utilities
Hosted with third party
Hosted with third party
16 desks in HQ building, power and HVAC Manufacturing plant with limited office accomodation, significant power requirements Post room
16 desks in HQ building, power and HVAC Manufacturing plant with limited office accomodation, significant power requirements Post room
Facilities, equipment and consumables ICT systems
2 desktop computers with access to printer, copier, scanner and fax Content management system
2 desktop computers with access to printer, copier, scanner and fax Content management system
17 desktop computers with access to printer, copier, scanner and fax Finance system Email Internet access HR system Payroll system Manufacturing control system CRM system Website admin Content management system
17 desktop computers with access to printer, copier, scanner and fax Finance system Email Internet access HR system Payroll system Manufacturing control system CRM system Website admin Content management system
Transportation
None
None
Commuting from home to work Commuting from home to work and back and back
Dependency People
ALL Normal Requirement
Business Activity: 1hr
[Note: to choose a different table layout, click in the table, select the Design menu ribbon and choose a table style. Select the View menu ribbon and tick "Gridlines" to see cell gridlines.]
Recovery Priority List [List the key business activities in order of recovery priority, together with the Recovery Time Objective and Minimum Business Continuity Objectives required] Priority Business Activity 1 Website sales
RTO 3 hours
MBCO Requirements at RTO Normal service
2
Finance
3 days
3
Human Resources
3 days
Pay suppliers Receive payments Basic enquiries service
4
Manufacturing
3 days
50% of normal capacity
5
Customer Services
3 days
Half of normal service level
6
Sales and Marketing
1 month
50% of normal sales activity
7
Product Development
1 month
Key products only
8 9 10