Having actionable correct data from your business is critical to conducting an effective business impact assessment:
- Business process supported: Clearly identify the business process that is supported by the information system.
- Business impact: How would the business be impacted if the information system were to become unavailable?
- Information systems utilized: Identify the specific component of the information system, or note the whole information system if there are no special subsystems to identify.
- Allowable outage: How long can the business go without the information system being available?
- Recovery priority: Identify the priority tier that the information system should be placed in for recovery.
The following is a sample form that can be used to catalog business processes related to the information system being analyzed:
Business process |
Impact |
Allowable outage |
Recovery priority |
Software |
Hardware |
Dependencies/interfaces |