|
"Stage 2: Analysis and Strategy " is about fixing the purposes and strategies of the Business Continuity Planning. This is necessary to use the financial and personnel resources for the right commercial processes, organisations and infrastructures.
Business Impact Analysis / Risk Assessment
The first task of the project team is to perform a Business Impact Analysis (BIA). The BIA delivers as a result an overview of the processes and systems which are critical for the survival of the enterprise, and their recovery point objective (RPO) and recovery time objective (RTO).
The Risk-Assessment - as a following process - determines the risks and their probability for the critical processes and systems.
Purposes
- Admission of the core processes of an enterprise, incl. it's dependence, according to the priority agreed in the initiation phase
- Identification of the dependence between processes and resources
- Evaluation of the effects by disturbance, failure or loss of the respective process
- Definition of the minimum requirements for the required resources according to the max. allowed down-time and the max. allowed overrun
Results
- Documentation of the critical processes and it's dependence
- Documentation of the critical resources
- Damage catalog with effect evaluation
- Documented requirements for all critical processes and resources
- Documented divergences of the demanded requirements
Business Continuity Strategy
The cognitions from the BIA permit the definition of an adequate Business Continuity Strategy, with an optimum relation from risk minimisation and recovery-options.
Purposes
- Definition of risk reducing measures
- Definition of recovery-options
- Definition of the acceptable remaining risk
Results
- Catalog of the risk reducing measures with costs calculation and prioritisation
- Recovery-options put into writing for processes, resources and organisation according to the results of the BIA (Active/Backup, Active/Active, Alternate Site)
- The BCM Strategy is approved and signed by the management
|
