Fill out Business Impact Analysis Questionnaire form
Complete Business Impact Analysis Questionnaire. See attachment below.
Business Impact Analysis
Objectives
The purpose of the business impact analysis (BIA) is to identify which business units/departments and processes are essential to the survival of _ABC Marketing Firm_. The BIA will identify how quickly essential business units and/or processes have to return to full operation following a disaster situation. The BIA will also identify the resources required to resume business operations.
Business impacts are identified based on worst-case Scenario that assumes that the physical infrastructure supporting each respective business unit has been destroyed and all records, equipment, etc. are not accessible for
3
0
days. Please note that the BIA will not address recovery solutions.
The objectives of the BIA are as follows:
· Estimate the financial impacts for each business unit, assuming a worst case scenario.
· Estimate the intangible (operational) impacts for each business unit, assuming a worst-case scenario.
· Identify the organization’s business unit processes and the estimated recovery time frame for each business unit.
Policy
Each Facility Business Continuity Planner shall perform a BIA on all business processes to determine the criticality of these processes to _ ABC Marketing Firm_ and to determine what the impacts are to the organization if those processes were interrupted. It shall identify the business process availability Recovery Time Objectives (RTOs), business process Recovery Point Objectives (RPOs), key business processes and the associated risks if these processes were not available.
Scope
Each Facility within _ ABC Marketing Firm_ should have a Business Impact Analysis which includes each department and process located within the facility.
Business Impact Analysis Scores
The following number scores have been established to provide firm tangible and intangible exposure categories for cross-company comparison.
Cumulative Dollar Loss Ranges (Tangible)
Score |
Loss Range |
||||
0 |
none |
||||
1 |
< $1,000 |
||||
2 |
≥ $1,000 < $ 5 ,000 |
||||
3 |
≥ $5,000 < $ 10 ,000 |
||||
4 |
≥ $10,000 < $25,000 |
||||
5 |
≥ $25,000 < $50,000 |
||||
6 |
≥ $50,000 < $100,000 |
||||
7 |
≥ $100, 000 < $150,000 |
||||
8 |
≥ $150,000 < $250,000 |
||||
9 |
≥ $250,000 < $500,000 |
||||
10 |
≥ $500,000 |
Customer Service
and
Goodwill
Loss Ranges (Intangible)
Effect
0
No
ne
Minimal
Moderate
Moderately
Heavy
Severe
Definitions
Impact Category |
Definition |
|||
Loss of Revenue |
Loss of income received from selling goods or services |
|||
Additional Expenses |
Temporary staffing, overtime, equipment, services |
|||
Regulatory and Legal |
Fines, penalties, compliance issues, contractual obligations, financial liabilities |
|||
Customer Service |
Termination or reduction of service level (internal of external), live operators vs. automated response |
|||
Goodwill |
Public image, shareholder relations, market share |
Business Impact Analysis Questionnaire
Business Unit/Department Name:
Description of Business Unit/Department’s Purpose in the Organization:
Name of Unit/Department’s Manager/Director:
In the followings table, list the business processes performed by the Business Unit/Department
1.
2.
Domain Access (Domain Controller)
3.
File/Print Sharing
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
For each business process listed above, fill out a questionnaire sheet.
Completed by: Date:
Business Impact Analysis Questionnaire
Business Unit/Department Name:
Business Process Name:
Business Function Description:
1. Does this Function have to be performed at a specific time of the day/week/month/year?
No
CONTROL Forms.CheckBox.1
Yes- If yes, state the requirement:
2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:
Cumulative Impact after Days: |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
20 |
30 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Loss of revenue |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Additional expenses |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Regulatory and legal |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Customer service |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
3. Is this function dependent on any technology (hardware or software):
No
Yes- If yes, list:
4. Does this function depend on any outside services or products for its successful completion?
No
Yes- If yes, list:
5. What is the maximum amount of time this business process could be unavailable?
Completed by: Date:
Business Impact Analysis Questionnaire
Business Unit/Department Name:
Business Process Name:
Business Function Description:
1. Does this Function have to be performed at a specific time of the day/week/month/year?
No
CONTROL Forms.CheckBox.1
Yes- If yes, state the requirement:
2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:
Cumulative Impact after Days:
Impact Category
1
3
5
10
20
30
Additional expenses
Regulatory and legal
Customer service
Goodwill
3. Is this function dependent on any technology (hardware or software):
No
Yes- If yes, list:
4. Does this function depend on any outside services or products for its successful completion?
No
Yes- If yes, list:
5. What is the maximum amount of time this business process could be unavailable?
Completed by: Date:
Business Impact Analysis Questionnaire
Business Unit/Department Name:
Business Process Name:
Business Function Description:
1. Does this Function have to be performed at a specific time of the day/week/month/year?
No
CONTROL Forms.CheckBox.1
Yes- If yes, state the requirement:
2. Using the Impact categories to classify the type of loss incurred and the Loss ranges (0 through 10) specify your estimated amount of exposure during each time period below:
Cumulative Impact after Days:
Impact Category
1
3
5
10
20
30
Loss of revenue
Additional expenses
Regulatory and legal
Customer service
Goodwill
3. Is this function dependent on any technology (hardware or software):
No
Yes- If yes, list:
4. Does this function depend on any outside services or products for its successful completion?
No
Yes- If yes, list:
5. What is the maximum amount of time this business process could be unavailable?
Completed by: Date:
Current Network Diagram, physical values are listed as (P-) and daily virtual values are listed in (V-)
Cisco 892 ISR
Cisco Catalyst 2960S-48LPS-L -Switch
Windows Server 2008 R2
Exchange 2010
Red Hat Enterprise
Apache, PHP, MySQL
JBOSS
Windows Server 2008 R2
Primary Domain Controller and File Share
48 Desktop Computers
Windows 7 Ent
83 Laptop Computers
Windows 7 Ent
8 Tablets,
Android OS
17 Smart Phones
Android OS
192.168.0.3
192.168.0.5
192.168.0.4
192.168.0.2
00-248
192.168.0.1
00-183
192.168.0.50-58
192.168.0.75-92
192.168.0.1
192.168.0.2
P -$9423.00
V -$5,450.00
P -$7453.00
V -$5,875.00
P -$14,785.00
V -$84,650.00
P -$924.00
P -$2754.00
P -$1425.00 Each
P -$1274.00 Each
P -$399.00 Each
P -$199.00 Each
A Business Impact Analysis is a process used to determine the effect of an interruption of services on each business unit and the organization as a whole. The analysis can provide information on the short and long term effects of a disaster on such factors as profit, market share and goodwill.
This information in required to develop a business continuity strategy for the entire organization. Please fill out this questionnaire in as much detail as possible. Your input will be valuable in developing an effective Business Continuity program.
IT – AD Services and Email
Provides support of Active Directory Domain services and Exchange Email to the company
IT – AD Services and Email
IT – AD Services and Email
File and Print Sharing
IT – AD Services and Email
_1577882083.unknown
_1577882087.unknown
_1577882089.unknown
_1577882090.unknown
_1577882088.unknown
_1577882085.unknown
_1577882086.unknown
_1577882084.unknown
_1577882079.unknown
_1577882081.unknown
_1577882082.unknown
_1577882080.unknown
_1577882077.unknown
_1577882078.unknown
_1577882075.unknown
_1577882076.unknown
_1577882073.unknown
_1577882074.unknown
_1445151528.vsd
�
�
�
�
�
�
�
�
�
�