The relationship between a business impact analysis, a DR plan, and business continuity are they go hand in hand. The business impact analysis per Vacca ““processes, loss, and cost related to catastrophic events,”. The DR plan is then formulated as the plan of action for various forms of disasters. Business continuity speaks to the importance and need of specific departments/assets/functions continuity. In short, the business impact analysis is the scope or the “what” is vital for the business to continue functioning. DR Plan is the efforts/actions taken when a disasters occurs or the “how”. Lastly, business continuity, is the “why” it’s important to have these processies in place.
Hi Nicholas,
I like the way you simplified the relationship between the three. The business impact analysis is what creates visibility on the important aspects of the business, the disaster recovery plan is how to protect and maintain the important aspects of the business, and business continuity is why a business needs to analyze and document a procedure to disaster recovery.
Each component plays its own part in allowing a business the leverage and manageability of its own assets assuming the worst were to happen because of a disaster. The BIA and DRP overarch business continuity. BIA tells continuity which threats to specific data will make certain projects more vulnerable compared to others. This process allows for a better plan for the restoration of vital functionalities until all other functionalities can be guaranteed and in the meantime can be offloaded to alternate sites if necessary.
I agree that each component play its own role in managing the company’s assets preparing for the worst in the event of a disaster. The business impact analysis also includes determining critical business assets and processes and the cost to resume operations. Additionally, business continuity management will need to be communicated and discussed so the plan can be carried out in the event of a disaster.
You raised a good point Matthew. These three all plays pivotal role in every organization and they must make sure all are developed and implemented correctly for better results.
The business impact anlysis, disaster recovery plan, and business continuity management are all connected, in fact they build upon each other. A business impact anlysis helps an organization evaluate which businesses or assets are designated as critical and help identify the priority to focus on in the event of an unplanned disaster. It helps inform the disaster recovery plan, which is designed to be a roadmap of procedures for employees or designated individuals to follow to ensure minimal time and disruption to an organization and it’s customers during a disaster. Business continuity management is making sure that all of these elements are considered, the correct individuals are trained and the plan is tested periodically. In addition, business continuity management considers the risks, threat and vulnerabilities to an organization and how to respond to an event if these risks are realized and minimize disruption to operations.
Hi Christa,
I like your emphasis on the importance of business continuity management and how they affect the procedures involved in business impact and disaster recovery. Business continuity management is essential regardless of if there is a disaster recovery plan as management makes sure that the plan is not only up-to-date and tested, but also implements the plan in the case of a live disaster.
I like the fact that you included training of the right employees and also periodic testing because without this in place there is no way an organization can have a cohesive BIA.
All three are connected to and help give context to each other. For example, a DR would be harder to develop and less effective without understanding components highlighted in the BIA like which departments, equipment, etc. are most vital to the company’s operation while the BCM provides justification as to why the previously mentioned plans are important and ensures their integrity. While obviously, they all serve different, albeit equally important functions, they are all built upon each other as a form of checks and balances. They are all in place to justify the necessity or lack thereof of the components of the others. The BIA identifies what the problem is, the DR identifies how the problem will be solved and the BCM identifies why the problem needs attention.
I loved your analogy for checks and balances. Each piece really does have its own part to play. I feel like people really downplay the criticality of all three pieces and how much each one relies on another and risks like that can’t be taken when important information is at stake.
A business impact analysis is needed in planning the disaster recovery plan to determine the most critical equipment and processes needed for the business to be up and running in the event of a disaster and in an alternate location, if necessary. The disaster recovery plan is needed in case of a disaster that would affect business operations. The disaster recovery plan is a documented plan that has been communicated and tested. Business continuity management is the members of management and the team leads that are responsible for carrying out the disaster recovery plan in the event of a disaster. All three (business impact analysis, disaster recovery plan, and business continuity management) are needed in planning and carrying out the plan successfully in the event a disaster.
Business impact analysis, a disaster recovery plan and business continuity management works together and you cannot perform only one and leave out the other one. Business analysis is usually the first procedure and it helps the organization to prioritize what areas must be protected first. Whereas business continuity focuses on keeping business operational during a disaster, while disaster recovery focuses on restoring data access and IT infrastructure after an incidence.
Hi Shepherd,
I agree that all three work hand-in-hand in making sure that organizations are prepared before, during, and after a disaster. Each part plays an important role in helping an organization be prepared for a disaster.
The relationship between the business impact analysis, a disaster recovery plan, and business continuity management are that these all facilitate an organization’s ability to handle interruptions to normal business. The business impact analysis helps to predict the risks associated with a disruption and as such helps in developing the disaster recovery plan. Business continuity management will help with keeping the business going during the event of a disaster and in the disaster recovery process.
The relationship between business impact analysis, a disaster recovery plan and business continuity management is that all need to be place and be thought about for unforeseen situations. A recovery plan is just the first step leading on to see how well you were able to manage the situation depending on that how bad are the areas affected. You have to access what you should fix first which would help the company stop bleeding. The business continuity will depend on how to make the company push further and get out of the risks and threats. How will the pieces be put together again and how do we go forwards would be the most important. We may think we have a perfect plan but sometimes it may not go according to what we thought.
A business continuity plan describes what steps must be taken in case of an outage or disruption, whereas a BIA identifies the risk that could prompt the outage as well as the critical business functions that could be impacted by the outage and prioritizes these for recovery. While a business continuity plan focuses on defining how business operations should function under abnormal circumstances during a disaster or emergency, a disaster recovery plan focuses on getting applications and systems back to normal. Organizations must review and update its plan to account for newer form of attacks and vulnerabilities.
I like that you didn’t just lump everything as a “Disaster” but rather split them into attacks/vulnerabilities. I know I personally always think of natural disasters such as fires/floods/tornados/etc. However, ransomware as a form of attack would also be included in a business continuity plan. If an organization’s data is encrypted and held for ransom, it would impede users from doing their job thus halting productivity which would undoubtedly impact revenue if a recovery plan wasn’t planned for this kind of disaster.
What is the relationship between business impact analysis, a disaster recovery plan and business continuity management?
The BIA, DRP, and BCP work hand in hand. They are all legs of the same recovery objective. The three work together to ensure that the business is prepared for and has a plan to recover from disaster in the most efficient and effective way possible. If all three are well crafted, well tested, and up to date, a business can be confident that it will weather any storm. Weakness in any one or more of the three will drastically reduce that confidence and increase the potential for a disaster to be a business ending event.
Relationship between business impact analysis, a disaster recovery plan, and business continuity management
A business impact analysis (BIA) recognizes the threat which might stimulate the shutdowns in addition to the important company capabilities that might be influenced by the power failure and emphasize these for recovery, while a business continuity plan (BCP) describes what needs to be done in the event of an interruption or disturbance. Disaster recovery is the process of recovering information exchange and IT technology after a crisis, whereas business continuity is focused on keeping operations going during an emergency. Both business continuity management and disaster recovery are preventative measures that may help an organization be ready for unexpected disasters. Both fields attempt to mitigate the consequences of disasters before they happen, rather than responding to them after the fact.
Reference
Abualkishik, A. Z., Alwan, A. A., & Gulzar, Y. (2020). Disaster recovery in cloud computing systems: An overview. International Journal of Advanced Computer Science and Applications, 11(9).
Dhanujati, N., & Girsang, A. S. (2018, September). Data center-disaster recovery center (DC-DRC) for high availability IT service. In 2018 International Conference on Information Management and Technology (ICIMTech) (pp. 55-60). IEEE.
Nicholas Foster says
The relationship between a business impact analysis, a DR plan, and business continuity are they go hand in hand. The business impact analysis per Vacca ““processes, loss, and cost related to catastrophic events,”. The DR plan is then formulated as the plan of action for various forms of disasters. Business continuity speaks to the importance and need of specific departments/assets/functions continuity. In short, the business impact analysis is the scope or the “what” is vital for the business to continue functioning. DR Plan is the efforts/actions taken when a disasters occurs or the “how”. Lastly, business continuity, is the “why” it’s important to have these processies in place.
Kenneth Saltisky says
Hi Nicholas,
I like the way you simplified the relationship between the three. The business impact analysis is what creates visibility on the important aspects of the business, the disaster recovery plan is how to protect and maintain the important aspects of the business, and business continuity is why a business needs to analyze and document a procedure to disaster recovery.
Matthew Stasiak says
Each component plays its own part in allowing a business the leverage and manageability of its own assets assuming the worst were to happen because of a disaster. The BIA and DRP overarch business continuity. BIA tells continuity which threats to specific data will make certain projects more vulnerable compared to others. This process allows for a better plan for the restoration of vital functionalities until all other functionalities can be guaranteed and in the meantime can be offloaded to alternate sites if necessary.
Jill Brummer says
I agree that each component play its own role in managing the company’s assets preparing for the worst in the event of a disaster. The business impact analysis also includes determining critical business assets and processes and the cost to resume operations. Additionally, business continuity management will need to be communicated and discussed so the plan can be carried out in the event of a disaster.
Shepherd Shenjere says
You raised a good point Matthew. These three all plays pivotal role in every organization and they must make sure all are developed and implemented correctly for better results.
Christa Giordano says
The business impact anlysis, disaster recovery plan, and business continuity management are all connected, in fact they build upon each other. A business impact anlysis helps an organization evaluate which businesses or assets are designated as critical and help identify the priority to focus on in the event of an unplanned disaster. It helps inform the disaster recovery plan, which is designed to be a roadmap of procedures for employees or designated individuals to follow to ensure minimal time and disruption to an organization and it’s customers during a disaster. Business continuity management is making sure that all of these elements are considered, the correct individuals are trained and the plan is tested periodically. In addition, business continuity management considers the risks, threat and vulnerabilities to an organization and how to respond to an event if these risks are realized and minimize disruption to operations.
Kenneth Saltisky says
Hi Christa,
I like your emphasis on the importance of business continuity management and how they affect the procedures involved in business impact and disaster recovery. Business continuity management is essential regardless of if there is a disaster recovery plan as management makes sure that the plan is not only up-to-date and tested, but also implements the plan in the case of a live disaster.
Abayomi Aiyedebinu says
Hi Christa ,
I like the fact that you included training of the right employees and also periodic testing because without this in place there is no way an organization can have a cohesive BIA.
Maxwell ODonnell says
All three are connected to and help give context to each other. For example, a DR would be harder to develop and less effective without understanding components highlighted in the BIA like which departments, equipment, etc. are most vital to the company’s operation while the BCM provides justification as to why the previously mentioned plans are important and ensures their integrity. While obviously, they all serve different, albeit equally important functions, they are all built upon each other as a form of checks and balances. They are all in place to justify the necessity or lack thereof of the components of the others. The BIA identifies what the problem is, the DR identifies how the problem will be solved and the BCM identifies why the problem needs attention.
Matthew Stasiak says
Hey Max,
I loved your analogy for checks and balances. Each piece really does have its own part to play. I feel like people really downplay the criticality of all three pieces and how much each one relies on another and risks like that can’t be taken when important information is at stake.
Jill Brummer says
A business impact analysis is needed in planning the disaster recovery plan to determine the most critical equipment and processes needed for the business to be up and running in the event of a disaster and in an alternate location, if necessary. The disaster recovery plan is needed in case of a disaster that would affect business operations. The disaster recovery plan is a documented plan that has been communicated and tested. Business continuity management is the members of management and the team leads that are responsible for carrying out the disaster recovery plan in the event of a disaster. All three (business impact analysis, disaster recovery plan, and business continuity management) are needed in planning and carrying out the plan successfully in the event a disaster.
Shepherd Shenjere says
Business impact analysis, a disaster recovery plan and business continuity management works together and you cannot perform only one and leave out the other one. Business analysis is usually the first procedure and it helps the organization to prioritize what areas must be protected first. Whereas business continuity focuses on keeping business operational during a disaster, while disaster recovery focuses on restoring data access and IT infrastructure after an incidence.
Kenneth Saltisky says
Hi Shepherd,
I agree that all three work hand-in-hand in making sure that organizations are prepared before, during, and after a disaster. Each part plays an important role in helping an organization be prepared for a disaster.
Kenneth Saltisky says
The relationship between the business impact analysis, a disaster recovery plan, and business continuity management are that these all facilitate an organization’s ability to handle interruptions to normal business. The business impact analysis helps to predict the risks associated with a disruption and as such helps in developing the disaster recovery plan. Business continuity management will help with keeping the business going during the event of a disaster and in the disaster recovery process.
Parmita Patel says
The relationship between business impact analysis, a disaster recovery plan and business continuity management is that all need to be place and be thought about for unforeseen situations. A recovery plan is just the first step leading on to see how well you were able to manage the situation depending on that how bad are the areas affected. You have to access what you should fix first which would help the company stop bleeding. The business continuity will depend on how to make the company push further and get out of the risks and threats. How will the pieces be put together again and how do we go forwards would be the most important. We may think we have a perfect plan but sometimes it may not go according to what we thought.
Abayomi Aiyedebinu says
A business continuity plan describes what steps must be taken in case of an outage or disruption, whereas a BIA identifies the risk that could prompt the outage as well as the critical business functions that could be impacted by the outage and prioritizes these for recovery. While a business continuity plan focuses on defining how business operations should function under abnormal circumstances during a disaster or emergency, a disaster recovery plan focuses on getting applications and systems back to normal. Organizations must review and update its plan to account for newer form of attacks and vulnerabilities.
Nicholas Foster says
Hey Abayomi,
I like that you didn’t just lump everything as a “Disaster” but rather split them into attacks/vulnerabilities. I know I personally always think of natural disasters such as fires/floods/tornados/etc. However, ransomware as a form of attack would also be included in a business continuity plan. If an organization’s data is encrypted and held for ransom, it would impede users from doing their job thus halting productivity which would undoubtedly impact revenue if a recovery plan wasn’t planned for this kind of disaster.
David Vanaman says
What is the relationship between business impact analysis, a disaster recovery plan and business continuity management?
The BIA, DRP, and BCP work hand in hand. They are all legs of the same recovery objective. The three work together to ensure that the business is prepared for and has a plan to recover from disaster in the most efficient and effective way possible. If all three are well crafted, well tested, and up to date, a business can be confident that it will weather any storm. Weakness in any one or more of the three will drastically reduce that confidence and increase the potential for a disaster to be a business ending event.
Samuel Omotosho says
Relationship between business impact analysis, a disaster recovery plan, and business continuity management
A business impact analysis (BIA) recognizes the threat which might stimulate the shutdowns in addition to the important company capabilities that might be influenced by the power failure and emphasize these for recovery, while a business continuity plan (BCP) describes what needs to be done in the event of an interruption or disturbance. Disaster recovery is the process of recovering information exchange and IT technology after a crisis, whereas business continuity is focused on keeping operations going during an emergency. Both business continuity management and disaster recovery are preventative measures that may help an organization be ready for unexpected disasters. Both fields attempt to mitigate the consequences of disasters before they happen, rather than responding to them after the fact.
Reference
Abualkishik, A. Z., Alwan, A. A., & Gulzar, Y. (2020). Disaster recovery in cloud computing systems: An overview. International Journal of Advanced Computer Science and Applications, 11(9).
Dhanujati, N., & Girsang, A. S. (2018, September). Data center-disaster recovery center (DC-DRC) for high availability IT service. In 2018 International Conference on Information Management and Technology (ICIMTech) (pp. 55-60). IEEE.