• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Protection of Information Assets

Temple University

Protection of Information Assets

MIS 5206.701 ■ Fall 2022 ■ William Bailey
  • HomePage
  • Instructor
  • Syllabus
  • Schedule
    • First Half of the Semester
      • Unit #1: Understanding an Organization’s Risk Environment
      • Unit #2: Case Study 1 – Snowfall and stolen laptop
      • Unit #2: Data Classification Process and Models
      • Unit #3: Risk Evaluation
      • Unit #4 Case #2: Autopsy of a Data Breach: The Target Case
      • Unit #5: Creating a Security Aware Organization
      • Unit #6: Physical and Environmental Security
    • Second Half of the Semester
      • Unit #8 Case Study 3 – A Hospital Catches the “Millennium Bug”
      • Unit #9: Business Continuity and Disaster Recovery Planning
      • Unit #10: Network Security
      • Unit #11: Cryptography, Public Key Encryption and Digital Signatures
      • Unit #12: Identity Management and Access Control
      • Unit #13: Computer Application Security
  • Deliverables
    • Weekly Deliverables
      • “In the News” Articles
      • Answers to Reading Discussion Questions
      • Comments on Reading Discussion Question and Other Students’ Answers
    • Case Studies
    • Team Project
  • Class Capture Videos

Question 3

October 12, 2022 by William Bailey 19 Comments

What is the relationship between business impact analysis, a disaster recovery plan and business continuity management?

Filed Under: Unit 09: Business Continuity and Disaster Recovery Tagged With:

Reader Interactions

Comments

  1. Nicholas Foster says

    October 16, 2022 at 1:30 pm

    The relationship between a business impact analysis, a DR plan, and business continuity are they go hand in hand. The business impact analysis per Vacca ““processes, loss, and cost related to catastrophic events,”. The DR plan is then formulated as the plan of action for various forms of disasters. Business continuity speaks to the importance and need of specific departments/assets/functions continuity. In short, the business impact analysis is the scope or the “what” is vital for the business to continue functioning. DR Plan is the efforts/actions taken when a disasters occurs or the “how”. Lastly, business continuity, is the “why” it’s important to have these processies in place.

    Log in to Reply
    • Kenneth Saltisky says

      October 18, 2022 at 8:43 pm

      Hi Nicholas,
      I like the way you simplified the relationship between the three. The business impact analysis is what creates visibility on the important aspects of the business, the disaster recovery plan is how to protect and maintain the important aspects of the business, and business continuity is why a business needs to analyze and document a procedure to disaster recovery.

      Log in to Reply
  2. Matthew Stasiak says

    October 17, 2022 at 3:41 pm

    Each component plays its own part in allowing a business the leverage and manageability of its own assets assuming the worst were to happen because of a disaster. The BIA and DRP overarch business continuity. BIA tells continuity which threats to specific data will make certain projects more vulnerable compared to others. This process allows for a better plan for the restoration of vital functionalities until all other functionalities can be guaranteed and in the meantime can be offloaded to alternate sites if necessary.

    Log in to Reply
    • Jill Brummer says

      October 17, 2022 at 10:27 pm

      I agree that each component play its own role in managing the company’s assets preparing for the worst in the event of a disaster. The business impact analysis also includes determining critical business assets and processes and the cost to resume operations. Additionally, business continuity management will need to be communicated and discussed so the plan can be carried out in the event of a disaster.

      Log in to Reply
    • Shepherd Shenjere says

      October 18, 2022 at 7:21 pm

      You raised a good point Matthew. These three all plays pivotal role in every organization and they must make sure all are developed and implemented correctly for better results.

      Log in to Reply
  3. Christa Giordano says

    October 17, 2022 at 8:18 pm

    The business impact anlysis, disaster recovery plan, and business continuity management are all connected, in fact they build upon each other. A business impact anlysis helps an organization evaluate which businesses or assets are designated as critical and help identify the priority to focus on in the event of an unplanned disaster. It helps inform the disaster recovery plan, which is designed to be a roadmap of procedures for employees or designated individuals to follow to ensure minimal time and disruption to an organization and it’s customers during a disaster. Business continuity management is making sure that all of these elements are considered, the correct individuals are trained and the plan is tested periodically. In addition, business continuity management considers the risks, threat and vulnerabilities to an organization and how to respond to an event if these risks are realized and minimize disruption to operations.

    Log in to Reply
    • Kenneth Saltisky says

      October 18, 2022 at 9:09 pm

      Hi Christa,
      I like your emphasis on the importance of business continuity management and how they affect the procedures involved in business impact and disaster recovery. Business continuity management is essential regardless of if there is a disaster recovery plan as management makes sure that the plan is not only up-to-date and tested, but also implements the plan in the case of a live disaster.

      Log in to Reply
    • Abayomi Aiyedebinu says

      October 19, 2022 at 2:13 pm

      Hi Christa ,

      I like the fact that you included training of the right employees and also periodic testing because without this in place there is no way an organization can have a cohesive BIA.

      Log in to Reply
  4. Maxwell ODonnell says

    October 17, 2022 at 9:13 pm

    All three are connected to and help give context to each other. For example, a DR would be harder to develop and less effective without understanding components highlighted in the BIA like which departments, equipment, etc. are most vital to the company’s operation while the BCM provides justification as to why the previously mentioned plans are important and ensures their integrity. While obviously, they all serve different, albeit equally important functions, they are all built upon each other as a form of checks and balances. They are all in place to justify the necessity or lack thereof of the components of the others. The BIA identifies what the problem is, the DR identifies how the problem will be solved and the BCM identifies why the problem needs attention.

    Log in to Reply
    • Matthew Stasiak says

      October 21, 2022 at 4:51 pm

      Hey Max,

      I loved your analogy for checks and balances. Each piece really does have its own part to play. I feel like people really downplay the criticality of all three pieces and how much each one relies on another and risks like that can’t be taken when important information is at stake.

      Log in to Reply
  5. Jill Brummer says

    October 17, 2022 at 10:12 pm

    A business impact analysis is needed in planning the disaster recovery plan to determine the most critical equipment and processes needed for the business to be up and running in the event of a disaster and in an alternate location, if necessary. The disaster recovery plan is needed in case of a disaster that would affect business operations. The disaster recovery plan is a documented plan that has been communicated and tested. Business continuity management is the members of management and the team leads that are responsible for carrying out the disaster recovery plan in the event of a disaster. All three (business impact analysis, disaster recovery plan, and business continuity management) are needed in planning and carrying out the plan successfully in the event a disaster.

    Log in to Reply
  6. Shepherd Shenjere says

    October 18, 2022 at 7:19 pm

    Business impact analysis, a disaster recovery plan and business continuity management works together and you cannot perform only one and leave out the other one. Business analysis is usually the first procedure and it helps the organization to prioritize what areas must be protected first. Whereas business continuity focuses on keeping business operational during a disaster, while disaster recovery focuses on restoring data access and IT infrastructure after an incidence.

    Log in to Reply
    • Kenneth Saltisky says

      October 18, 2022 at 9:17 pm

      Hi Shepherd,
      I agree that all three work hand-in-hand in making sure that organizations are prepared before, during, and after a disaster. Each part plays an important role in helping an organization be prepared for a disaster.

      Log in to Reply
  7. Kenneth Saltisky says

    October 18, 2022 at 7:50 pm

    The relationship between the business impact analysis, a disaster recovery plan, and business continuity management are that these all facilitate an organization’s ability to handle interruptions to normal business. The business impact analysis helps to predict the risks associated with a disruption and as such helps in developing the disaster recovery plan. Business continuity management will help with keeping the business going during the event of a disaster and in the disaster recovery process.

    Log in to Reply
  8. Parmita Patel says

    October 19, 2022 at 12:46 pm

    The relationship between business impact analysis, a disaster recovery plan and business continuity management is that all need to be place and be thought about for unforeseen situations. A recovery plan is just the first step leading on to see how well you were able to manage the situation depending on that how bad are the areas affected. You have to access what you should fix first which would help the company stop bleeding. The business continuity will depend on how to make the company push further and get out of the risks and threats. How will the pieces be put together again and how do we go forwards would be the most important. We may think we have a perfect plan but sometimes it may not go according to what we thought.

    Log in to Reply
  9. Abayomi Aiyedebinu says

    October 19, 2022 at 2:11 pm

    A business continuity plan describes what steps must be taken in case of an outage or disruption, whereas a BIA identifies the risk that could prompt the outage as well as the critical business functions that could be impacted by the outage and prioritizes these for recovery. While a business continuity plan focuses on defining how business operations should function under abnormal circumstances during a disaster or emergency, a disaster recovery plan focuses on getting applications and systems back to normal. Organizations must review and update its plan to account for newer form of attacks and vulnerabilities.

    Log in to Reply
    • Nicholas Foster says

      October 21, 2022 at 5:27 pm

      Hey Abayomi,

      I like that you didn’t just lump everything as a “Disaster” but rather split them into attacks/vulnerabilities. I know I personally always think of natural disasters such as fires/floods/tornados/etc. However, ransomware as a form of attack would also be included in a business continuity plan. If an organization’s data is encrypted and held for ransom, it would impede users from doing their job thus halting productivity which would undoubtedly impact revenue if a recovery plan wasn’t planned for this kind of disaster.

      Log in to Reply
  10. David Vanaman says

    October 19, 2022 at 5:19 pm

    What is the relationship between business impact analysis, a disaster recovery plan and business continuity management?

    The BIA, DRP, and BCP work hand in hand. They are all legs of the same recovery objective. The three work together to ensure that the business is prepared for and has a plan to recover from disaster in the most efficient and effective way possible. If all three are well crafted, well tested, and up to date, a business can be confident that it will weather any storm. Weakness in any one or more of the three will drastically reduce that confidence and increase the potential for a disaster to be a business ending event.

    Log in to Reply
  11. Samuel Omotosho says

    October 22, 2022 at 7:38 pm

    Relationship between business impact analysis, a disaster recovery plan, and business continuity management

    A business impact analysis (BIA) recognizes the threat which might stimulate the shutdowns in addition to the important company capabilities that might be influenced by the power failure and emphasize these for recovery, while a business continuity plan (BCP) describes what needs to be done in the event of an interruption or disturbance. Disaster recovery is the process of recovering information exchange and IT technology after a crisis, whereas business continuity is focused on keeping operations going during an emergency. Both business continuity management and disaster recovery are preventative measures that may help an organization be ready for unexpected disasters. Both fields attempt to mitigate the consequences of disasters before they happen, rather than responding to them after the fact.

    Reference

    Abualkishik, A. Z., Alwan, A. A., & Gulzar, Y. (2020). Disaster recovery in cloud computing systems: An overview. International Journal of Advanced Computer Science and Applications, 11(9).

    Dhanujati, N., & Girsang, A. S. (2018, September). Data center-disaster recovery center (DC-DRC) for high availability IT service. In 2018 International Conference on Information Management and Technology (ICIMTech) (pp. 55-60). IEEE.

    Log in to Reply

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Weekly Discussions

  • Unit 01: Understanding an Organization's Risk Environment (5)
  • Unit 02: Case Study 1 – Snowfall and a stolen laptop (6)
  • Unit 02: Data Classification Process and Models (6)
  • Unit 03: Risk Evaluation (6)
  • Unit 04: Case Study 2 – Autopsy of a Data Breach – The Target Case (4)
  • Unit 05: Creating a Security Aware Organization (6)
  • Unit 06: Physical and Environmental Security (6)
  • Unit 08: Case Study 3 – A Hospital Catches the "Millennium Bug" (3)
  • Unit 09: Business Continuity and Disaster Recovery (6)
  • Unit 10: Network Security (6)
  • Unit 11: Cryptography, Public Key Encryption and Digital Signature (6)
  • Unit 12: Identity Management and Access Control (6)
  • Unit 13: Computer Application Security (6)
  • Welcome (1)

Copyright © 2025 · Course News Pro on Genesis Framework · WordPress · Log in