Business Impact Analysis

04/08/2304/08/23 11

BUSINESS IMPACT BUSINESS IMPACT ANALYSISANALYSIS

FROM BEGINNING TO ENDFROM BEGINNING TO END

2204/08/2304/08/23

The Business Impact AnalysisThe Business Impact Analysis

What is it?What is it? Plan for SuccessPlan for Success Collect True DataCollect True Data Analyze & Analyze &

Document the Document the ImpactsImpacts

Obtain AcceptanceObtain Acceptance

3304/08/2304/08/23

The Business Impact AnalysisThe Business Impact Analysis

WHAT IS IT?

4404/08/2304/08/23

WHAT IS IT?WHAT IS IT?

Prevention or Recovery?Prevention or Recovery?

* The Risk Assessment * The Risk Assessment

* The Business Impact * The Business Impact AnalysisAnalysis

5504/08/2304/08/23


What is a Disaster?What is a Disaster?

A disaster is a sudden A disaster is a sudden unplanned calamitous unplanned calamitous event that creates an event that creates an inability on an inability on an organizations part to organizations part to provide the critical provide the critical business functions for business functions for some predetermined some predetermined period of time and period of time and which results in a which results in a great damage or loss. great damage or loss.

6604/08/2304/08/23

WHAT IS IT?WHAT IS IT? Why do an Business Impact Analysis?Why do an Business Impact Analysis?

* To establish the organizational value of * To establish the organizational value of each business unit or resource as they each business unit or resource as they relate to the functioning of the total relate to the functioning of the total organization.organization.

* To provide the basis for identifying the * To provide the basis for identifying the critical resources required to develop a critical resources required to develop a business recovery strategy. business recovery strategy.

* To establish the timely order or priority for * To establish the timely order or priority for restoring the functions of the organization in restoring the functions of the organization in the event of a disruption.the event of a disruption.

7704/08/2304/08/23

WHAT IS ITWHAT IS IT

Who is responsible for recovery?Who is responsible for recovery?

* Responsibility for continuity of a business * Responsibility for continuity of a business function in the absence of a critical function in the absence of a critical resource (e.g., phone, mail, electricity, or resource (e.g., phone, mail, electricity, or information processing) rests with the user information processing) rests with the user of the resource.of the resource.

* Responsibility for the recovery of the * Responsibility for the recovery of the critical resource rests with the provider of critical resource rests with the provider of the resource.the resource.

8804/08/2304/08/23

WHAT IS IT?WHAT IS IT?The Business Continuity programThe Business Continuity program

Phase O

Needs Assessment Risk Assessment

Phase IBusiness Impact

Analysis

Phase IIRecovery Strategy

9904/08/2304/08/23

WHAT IS IT?WHAT IS IT?The Business Continuity programThe Business Continuity program

Phase III

Continuity Plan

Phase IV

Implementation

Ongoing Maintenance

and Exercising

101004/08/2304/08/23


The Business Impact Analysis ProjectThe Business Impact Analysis Project

* Project Planning * Project Planning

* Data Collection * Data Collection

* Data Analysis * Data Analysis

* Findings Report * Findings Report

* Acceptance * Acceptance

111104/08/2304/08/23

THE BUSINESS IMPACT ANALYSISTHE BUSINESS IMPACT ANALYSIS

PLAN FOR SUCCESS

121204/08/2304/08/23

PLAN FOR SUCCESSPLAN FOR SUCCESS

Agency CommitmentAgency Commitment

* To Purpose * To Purpose

* To Approach * To Approach

* To resources * To resources

* To Time * To Time

131304/08/2304/08/23

PLAN FOR SUCCESS PLAN FOR SUCCESS


To Purpose:To Purpose: * Identify Criticality of Business* Identify Criticality of Business Functions Functions * Identify Impact of Disruptions * Identify Impact of Disruptions * Identify Impact of Disruptions * Identify Impact of Disruptions Over Time Over Time * Identify Critical Dependencies * Identify Critical Dependencies * Identify Critical Resources * Identify Critical Resources

141404/08/2304/08/23


Agency Agency CommitmentCommitment To Approach:To Approach:

* Data Collection* Data Collection

* Data Analysis * Data Analysis

* Project Plan * Project Plan

151504/08/2304/08/23



To Resources:To Resources:

* Project Sponsor* Project Sponsor

* Project Manager * Project Manager

* Project Team * Project Team

* Project Participants * Project Participants

161604/08/2304/08/23



To Time: To Time:

* Overall Project* Overall Project

* Project Manager * Project Manager



171704/08/2304/08/23


Demonstration of Agency Demonstration of Agency CommitmentCommitment

* Policy Statement * Policy Statement

* Directive * Directive MemorandumsMemorandums

* Budget Approval * Budget Approval

* Verbal Endorsement * Verbal Endorsement

181804/08/2304/08/23


Key Project PersonnelKey Project Personnel

* Project Sponsor * Project Sponsor


* Project Coaches * Project Coaches

* Project Managers * Project Managers


191904/08/2304/08/23


COLLECT THE TRUE DATA PART ONE

ON TARGET

202004/08/2304/08/23

COLLECT THE TRUE DATA!COLLECT THE TRUE DATA!

Identify ParticipantsIdentify Participants

* Credible Spokesperson * Credible Spokesperson

* Represents Functional Area * Represents Functional Area

* Highest Organizational * Highest Organizational LevelLevel

212104/08/2304/08/23


Determine ApproachDetermine Approach

* Interview * Interview

* Questionaire ( Yes / No questions) * Questionaire ( Yes / No questions)

* Combinations * Combinations

222204/08/2304/08/23


Design the SystemDesign the System

Objective:Objective:

To ensure an accurate, To ensure an accurate, consistent and complete consistent and complete approach to the data approach to the data gathering.gathering.

232304/08/2304/08/23


Design SystemDesign System

DISCUSSION TOPICS:DISCUSSION TOPICS:

* Business Unit’s Mission* Business Unit’s Mission

* Primary Service * Primary Service ObjectivesObjectives

* Organization * Organization

* Dependencies * Dependencies

242404/08/2304/08/23



DISCUSSION TOPICS:DISCUSSION TOPICS:

* Impacts from Disruption Over * Impacts from Disruption Over TimeTime - Service Objectives - Service Objectives - Financial - Financial - Legal and Regulatory - Legal and Regulatory - Customer Service - Customer Service - Other Functions - Other Functions

* Impacts for Impact Mitigation * Impacts for Impact Mitigation

252504/08/2304/08/23



Interview Approach:Interview Approach:

* Develop Interview * Develop Interview GuideGuide

* Train Interviewers * Train Interviewers

* Validate * Validate

262604/08/2304/08/23



Questionnaire Approach:Questionnaire Approach:

* Design Questionnaire* Design Questionnaire

* Develop the Data * Develop the Data AnalysisAnalysis

* Develop Instructions * Develop Instructions

* Validate * Validate

272704/08/2304/08/23

COLLECT TRUE DATA!COLLECT TRUE DATA!

Conduct Data CollectionConduct Data Collection

* Prepare Participants * Prepare Participants

* Collect Data * Collect Data

* Validate Results * Validate Results

282804/08/2304/08/23


Prepare ParticipantsPrepare Participants

* Issue memorandum * Issue memorandum

* Conduct Formal * Conduct Formal PresentationPresentation

* Distribute Questionnaire * Distribute Questionnaire

292904/08/2304/08/23

COLLECT THE TRUE DATA!COLLECT THE TRUE DATA! Validate ResultsValidate Results

Questionnaire approach:Questionnaire approach:

* Review for Consistency* Review for Consistency

* Identify Missing Information * Identify Missing Information

* Identify “Red Flags” * Identify “Red Flags”

* Correlate with Second * Correlate with Second SourceSource

* Follow up Interview * Follow up Interview

RED FLAG

303004/08/2304/08/23


Validate ResultsValidate Results

Interview Approach:Interview Approach:

* Organize Interview Notes* Organize Interview Notes

* Identify Missing Information * Identify Missing Information

* Prepare Summary Notes * Prepare Summary Notes

* Confirm Results in Writing * Confirm Results in Writing

313104/08/2304/08/23

COLLECT THE TRUE DATA! COLLECT THE TRUE DATA!

Plan The Data CollectionPlan The Data Collection

* Identify participants * Identify participants

* Determine Approach * Determine Approach

* Design System * Design System

323204/08/2304/08/23


COLLECT THE TRUE DATA PART TWO

ON TARGET

333304/08/2304/08/23


Conducting the Conducting the InterviewInterview

What Have We What Have We Learned?Learned?

The Next StepsThe Next Steps

343404/08/2304/08/23

CONDUCTING THE INTERVIEWCONDUCTING THE INTERVIEW TIME:TIME:

* Schedule 1 ½ to 2 hours * Schedule 1 ½ to 2 hours

* Arrive on Time! * Arrive on Time!

* Re-Verify time available * Re-Verify time available

* Manage to meet objectives * Manage to meet objectives

Participants:Participants:

* Allow Staff participation * Allow Staff participation * Focus on primary Participant. * Focus on primary Participant.

353504/08/2304/08/23

CONDUCTING THE INTERVIEWCONDUCTING THE INTERVIEW

The Interview:The Interview:

* Conduct interview in * Conduct interview in conversationalconversational manner manner

* Ask open ended questions * Ask open ended questions

* Allow Participant (s) to respond * Allow Participant (s) to respond

* Maintain control to ensure * Maintain control to ensure adequateadequate coverage of topics coverage of topics

363604/08/2304/08/23


ANALYZE & DOCUMENT THE IMPACTS

373704/08/2304/08/23

ANALIZE & AND DOCUMENT THE ANALIZE & AND DOCUMENT THE IMPACTS!IMPACTS!

Data AnalysisData Analysis

* Impacts form disruptions * Impacts form disruptions overover time time

* Critical Dependencies * Critical Dependencies

383804/08/2304/08/23

ANALYIZE & DOCUMENT THE ANALYIZE & DOCUMENT THE IMPACTSIMPACTS

ImpactsImpacts

* Quantitative * Quantitative Losses or extra expenses that areLosses or extra expenses that are quantitative into financial terms quantitative into financial terms (I.e.,(I.e., dollars) dollars)

* Qualitative* Qualitative

Intangible or operational impacts Intangible or operational impacts thatthat are not quantifiable into financial are not quantifiable into financial terms terms

393904/08/2304/08/23

ANALYZE & DOCUMENT THE ANALYZE & DOCUMENT THE IMPACTSIMPACTS

Critical DependenciesCritical Dependencies

* Communication * Communication * Information Processing * Information Processing * Personnel * Personnel * Communications * Communications * Equipment * Equipment * Facilities * Facilities * Other Organizational * Other Organizational Functions Functions * Vendors * Vendors

404004/08/2304/08/23

ANALYZE & DOCUMENT THE ANALYZE & DOCUMENT THE IMPACTSIMPACTS

Findings ReportFindings Report

Provide management the appropriate Provide management the appropriate information to develop or modify information to develop or modify existing recovery strategies based on existing recovery strategies based on business impact. business impact. * Document the Project Process * Document the Project Process * Summarize Business impacts * Summarize Business impacts * Identify Conclusions & * Identify Conclusions & Recommendations Recommendations * Define the Next Step (s) or Actions * Define the Next Step (s) or Actions

414104/08/2304/08/23


OBTAIN ACCEPTANCE

Acceptance

424204/08/2304/08/23

OBTAIN ACCEPTANCE!OBTAIN ACCEPTANCE!

OBTAIN MANAGEMENT BUY-IN AND OBTAIN MANAGEMENT BUY-IN AND APPROVAL TO PROCEED TO THE APPROVAL TO PROCEED TO THE NEXT STEP!NEXT STEP!

APPROVED

434304/08/2304/08/23

OBTAIN ACCEPTANCE!OBTAIN ACCEPTANCE!

The Next StepThe Next Step

Develop A Business Recovery Develop A Business Recovery Strategy:Strategy:

* Determine Resource Requirements* Determine Resource Requirements * Evaluate & Recommend Recovery * Evaluate & Recommend Recovery Strategy Strategy * Investigate Recovery Design * Investigate Recovery Design Alternatives Alternatives * Validate Feasibility of Findings * Validate Feasibility of Findings * Develop Cost & Implementation Plan * Develop Cost & Implementation Plan

444404/08/2304/08/23

QUESTIONS?

[email protected]

682-4903B. I.

A.

454504/08/2304/08/23

REFERENCEREFERENCE

[email protected]@cs.com

Business Impact Analysis

Documents

true data

data analysis

business impact analysis

project participants

business impact analysis

conduct data collection

project team

project sponsor