• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Protection of Information Assets

Temple University

Protection of Information Assets

MIS 5206.701 ■ Fall 2023 ■ David Lanter
  • HomePage
  • Instructor
  • Syllabus
  • Schedule
    • First Half of the Semester
      • Unit #1: Understanding an Organization’s Risk Environment
      • Unit #2: Case Study 1 – Snowfall and stolen laptop
      • Unit #2: Data Classification Process and Models
      • Unit #3: Risk Evaluation
      • Unit #4 Case #2: Autopsy of a Data Breach: The Target Case
      • Unit #5: Creating a Security Aware Organization
      • Unit #6: Physical and Environmental Security
    • Second Half of the Semester
      • Unit #8 Case Study 3 – A Hospital Catches the “Millennium Bug”
      • Unit #9: Business Continuity and Disaster Recovery Planning
      • Unit #10: Network Security
      • Unit #11: Cryptography, Public Key Encryption and Digital Signatures
      • Unit #12: Identity Management and Access Control
      • Unit #13: Computer Application Security
  • Deliverables
    • Weekly Deliverables
      • “In the News” Articles
      • Answers to Reading Discussion Questions
      • Comments on Reading Discussion Question and Other Students’ Answers
    • Case Studies
    • Team Project
  • Zoom link

Question 2

October 19, 2023 by David Lanter 27 Comments

What is a business impact analysis?  Why is it needed?

Filed Under: Unit 09: Business Continuity and Disaster Recovery Tagged With:

Reader Interactions

Comments

  1. Andrew Young says

    October 19, 2023 at 11:42 am

    A business impact analysis, or BIA, is a thorough inventory of organizational functions and outlines how they would be impacted in the event of a disaster. It outlines how critical aa function is to an organizations survival, vulnerabilities, and relative cost to replace and insure the system. BIA’s are often the first step in creating a recovery plan, as an understanding of the systems that are running in an organization and their levels of criticality are needed to plot out the response to a disaster. A BIA is therefor required for any business that is planning on creating a comprehensive recovery plan. Understanding what systems could be impacted and how will be critical in analyzing how best to respond in the event of a disaster

    Log in to Reply
    • Marc Greenberg says

      October 23, 2023 at 5:50 pm

      Also to be considered beside the financial cost is customer dissatisfaction, safety and compliance. How quickly they can recover so that they can stay in business. It is not just a system that needs to be considered, but the people to have a place to their job and other tools which might be needed. Basically it how can they recover, how quickly and efficiently.

      Log in to Reply
  2. Ikenna Alajemba says

    October 19, 2023 at 11:01 pm

    A Business Impact Analysis (BIA) is a methodical procedure that analyzes the potential effects of various risks, catastrophes, or disruptions on the crucial business operations, procedures, and systems of an organization. Understanding the importance of these components to the company and prioritizing recovery efforts are the main goals of a BIA. Why a Business Impact Analysis is required is as follows: Risk Assessment, Criticality Assessment, Resource Allocation, Recovery Prioritization (RTOs and RPOs), Contingency Planning, Resource Efficiency, Risk Management, etc. In summary, a Business Impact Analysis is a critical step in the development of a comprehensive business continuity and disaster recovery strategy. It helps organizations understand the specific risks they face, prioritize recovery efforts, and allocate resources effectively to ensure the continued operation of critical functions in the face of disruptions.

    Log in to Reply
    • Jeffrey Sullivan says

      October 23, 2023 at 7:40 am

      The questions you asked are open ended questions that are perfect in a sales environment, it’s gets the customer to talk about their business and bring up valid point to combat competition at a later time. The BIA is a great way to understand all the risk whether it be man-made or a natural disaster. Having this combine with a DRP is a great way to ensure business continuity. I would love to see this on a large scale for a company like Amazon, Google etc.

      Log in to Reply
  3. Erskine Payton says

    October 21, 2023 at 8:12 pm

    A business impact analysis (BIA) determines critical business processes and what is the impact of them being offline during a disaster. A BIA helps in predicting the fallout from a disaster and collects data which aide in developing recovery strategies. It answers the question, “How long are we down?” and “How much is it going to cost?” Vacca mentions that, “An organization must define resilience requirements” and “identify a robust mitigation strategy”. Vacca also mentions that knowing your tolerance of an outage you can list objectives that would guide you successfully through and outage.

    Log in to Reply
    • Chidi Okafor says

      October 22, 2023 at 1:06 pm

      Hi Erskine, I like how you gave an example with questions like – how long are we down? and how much is it going to cost? BIA is needed to help organizations predict the consequences of disrupting a business function and gathering information to recover from such incident.

      Log in to Reply
    • Akiyah says

      October 24, 2023 at 6:34 pm

      In addition to the questions mentioned, a Business Impact Analysis (BIA) can answer or determine the following questions:
      What are the compliance requirements? What are the resource requirements? Are there any interdependencies? If yes, what are they?

      A BIA can also identify any testing and training needs to ensure that the identified resources areas are ready to go in event of a disaster.

      Log in to Reply
  4. Ashley A. Jones says

    October 22, 2023 at 12:21 am

    A business impact analysis (BIA) is designed to counteract unplanned business disruptions. It examines every department of the company and assesses important points that become the building blocks for the disaster recovery plan. Getting this intel can be done by engaging with members of each department and asking them important questions such as “What do you perceive to be the largest risks to the company?” according to Vacca’s chapter 36. The BIA essentially answers these 4 questions: 1. How long can the business operate without critical assets? 2. What are the business functions, and which do you deem critical? 3. Which business functions are susceptible to force majeure? And 4. What is the estimated cost of loss for business functions over a specified time? Since unplanned disruptions can cost hundreds to thousands of dollars, it is important to have a business impact assessment and to test it intervals dependent on the complexity of the business. Customer satisfaction and compliance are also reasons that a BIA is advantageous. Developing an efficiently tested business resilience plan is necessary for business continuity and recovery solutions. Following these steps will help the company build more confidence in future financial endeavors by sharpening their recovery methodologies and ultimately meeting objectives.

    Log in to Reply
  5. Chidi Okafor says

    October 22, 2023 at 1:00 pm

    A Business Impact Assessment (BIA) is a crucial tool for identifying and prioritizing critical business processes based on their impact during disruptions. This assessment helps organizations define resilience requirements, justify investments in business continuity, and establish effective risk mitigation strategies. A BIA is essential for addressing the risk of unexpected disruptions that could lead to significant losses, customer dissatisfaction, and compliance problems. It plays a vital role in the overall business continuity and recovery planning process.

    Log in to Reply
  6. Jeffrey Sullivan says

    October 22, 2023 at 4:22 pm

    A business impact analysis examines every division of the company and details several key items. Some of these are: How long the organization can survive without critical assets, identify business functions, then prioritize and identify which are critical, vulnerability, specifically which business functions are susceptible to natural disaster, estimated cost of loss for business functions over time. The BIA’s data is the building block of the DRP is the unbiased look at process, loss, and cost. It doesn’t matter what the disaster is, whether it is a hacker or hurricane, it provides a look at the loss of function irrespective of the cause.

    The BIA is needed to give you an assessment of costs. It will then start with purpose, scope, and expectations. The BIA should also contain lists detailing complete contact information of vendors, supplies, creditors, and business to business relationships. Some of what the BIA examines every division of the company and details several key items. Some of these items are: How long the organization can survive without critical assets, identify business functions, and prioritize and identify which are critical, estimated cost of loss for business functions over time.

    Log in to Reply
    • Erskine Payton says

      October 24, 2023 at 12:59 pm

      As I read the text and the comments, it fascinates me how detailed what is seems to a simple process but is very complicated yet vital. A BIA does it’s best to try to predict what could be and what it could cost. Which is a chore because it does not specific to one type of disaster. In the end it is good to have something in place just in case. Vacca points out the importance of how a BIA plays into creating the DR.

      Log in to Reply
  7. Marc Greenberg says

    October 22, 2023 at 4:28 pm

    Is a process that determines critical business processes and their impact during disruption that can cause major losses, customer dissatisfaction,,safety and compliance issues. During this time it provides for an organization to see how their business would be affected if its business processes were taken down by an interruption, and determines which functions are the most crucial to business continued operations, and creates a plan for recovery.

    Log in to Reply
    • Alyanna Inocentes says

      October 22, 2023 at 9:58 pm

      Hey Marc,

      Although businesses may have BIA’s, I’ve always questioned how long an organization may take to prioritize critical functions and assign recovery time objectives, especially when they have hundreds or thousands of devices, software’s, and vendors. Have you ever wondered how often organizations revisit BIA’s when adding a new device/software/vendor?

      Log in to Reply
    • Andrew Young says

      October 24, 2023 at 9:54 am

      Well said Marc! The process of creating these inventories is really interesting to me, as I can imagine that creating an inventory of ones most critical systems can have an impact on how businesses and organizations process and prioritize their systems, not just in the context of a DRP. It would be interesting to see if these inventories ever result in departments investing more into certain systems simply based on a use-based metric by understanding which systems are most used and most critical, not just for DRP purposes but also to improve efficiency

      Log in to Reply
  8. Akintunde Akinmusire says

    October 22, 2023 at 4:59 pm

    A Business Impact Analysis (BIA) is a thorough assessment of an organization’s assets that analyzes the consequences of a potential disruption or disaster in the organization’s operations. BIA helps an organization to prepare for the future by analyzing and understanding the impact of risks in the organization’s operations. BIA is used to minimize potential losses and to create a recovery solution for each situation.

    Log in to Reply
    • Unnati Singla says

      October 24, 2023 at 10:55 pm

      Akintunde, I completely agree with your statement. A business impact analysis is a key part of creating a disaster recovery plan. In order for a business to survive unexpected interruptions, or disasters a business impact analysis can definitely help them understand the consequences of downtime

      Log in to Reply
  9. Kelly Conger says

    October 22, 2023 at 5:53 pm

    A business impact analysis comprehensively assesses an organization’s critical business functions and the potential consequences of disruptions to those functions. It acts as a thorough inventory of organizational processes and outlines how they would be impacted in the event of a disaster. A BIA is a systematic procedure that analyzes the potential effects of various risks, catastrophes, or disruptions on an organization’s crucial business operations, practices, and systems. It examines every company department and assesses important points that become the building blocks for the disaster recovery plan. The primary objectives of a BIA are to identify critical business functions, evaluate potential impacts, prioritize recovery efforts, inform disaster recovery planning, and support business continuity planning.

    In essence, a BIA is a critical tool for organizations to understand their vulnerabilities, prioritize their recovery efforts, and develop effective disaster recovery and business continuity plans. It helps organizations make informed decisions about resource allocation, risk mitigation strategies, and preparedness for potential disruptions.

    Log in to Reply
    • Ikenna Alajemba says

      October 22, 2023 at 9:07 pm

      A BIA systematically evaluates an organization’s vital functions, potential disruptions and their consequences. It effectively inventories processes, assesses every department’s role in disaster response, and forms the blueprint for recovery plans. Its main objectives include identifying crucial operations, evaluating impacts, prioritizing recovery, and informing disaster planning. Essentially, a BIA is an indispensable tool that aids organizations in understanding vulnerabilities, strategizing recoveries, allocating resources, mitigating risks and ensuring preparedness for eventual disruptions. Good one from you Kelly!

      Log in to Reply
  10. Akiyah says

    October 22, 2023 at 7:41 pm

    A Business Impact Analysis (BIA) is the initial phase in disaster planning where a company assesses the potential impact of a disaster or outage on its critical business operations. The primary objective of a BIA is to identify and prioritize the most crucial systems that require attention in the event of a disaster. These critical systems are the first to be restored during an emergency. Additionally, the BIA quantifies the impact a disaster can have on an organization’s operations, reputation, and financial stability.

    A BIA is essential for effective risk management, prioritization of disaster recovery efforts, resource allocation, and making critical decisions during a disaster. It serves as the foundation for developing a Disaster Recovery Plan (DRP) and is crucial for ensuring an organization’s resilience in the face of disruptions. Without a BIA, the development of a DRP would be significantly hindered.

    Log in to Reply
    • Kelly Conger says

      October 24, 2023 at 6:26 pm

      I agree entirely that a Business Impact Analysis (BIA) is an essential component of disaster planning. It provides organizations with a comprehensive understanding of their vulnerabilities and the potential consequences of disruptions, enabling them to make informed decisions about risk mitigation and resource allocation. By identifying critical systems and prioritizing their recovery, the BIA ensures that organizations can maintain business continuity and minimize the impact of disasters on their operations, reputation, and financial stability.

      Log in to Reply
  11. Alyanna Inocentes says

    October 22, 2023 at 9:09 pm

    A Business Impact Analysis (BIA) is a process in which organizations assess and analyze the potential consequences of disruptions on their critical business functions and operations. A BIA is needed as it helps identify key processes, systems, and resources, along with their dependencies, while quantifying the financial, operational, and reputational impacts of various disruptive events. By defining recovery time objectives (RTOs) and resource requirements, the BIA informs business continuity and disaster recovery planning, enabling organizations to prioritize and allocate resources effectively to minimize downtime and financial losses in the face of unexpected incidents

    Log in to Reply
    • Alex Ruiz says

      October 24, 2023 at 11:01 pm

      Alyanna you’ve explained the importance of a Business Impact Analysis very well, it’s also worth noting that the BIA is not a one-time effort. It should be periodically reviewed and updated to ensure that it accurately reflects the everchanging landscape of an organization’s critical functions and potential risks. How do you think organizations can best integrate BIAs into their overall risk management and business continuity planning to ensure a proactive and adaptable approach to potential disruptions?

      Log in to Reply
  12. Unnati Singla says

    October 22, 2023 at 11:08 pm

    One of the most important tools for anticipating unexpected company disruptions is a business impact analysis (BIA). It involves carefully going over every department in a business to find important data that serves as the basis for a disaster recovery strategy.

    According to Vacca’s chapter 36, this data is acquired by having conversations with department members and posing key questions like “What do you perceive as the biggest risks to the company?” The BIA responds to four primary queries:
    1. For what length of time can the company operate without essential assets?
    2. What are the fundamental operations of a business?
    3. Which operations are susceptible to unforeseen circumstances?
    4. For these functions, what is the projected cost of loss over a certain time frame?

    A regular and well-examined BIA is crucial since unexpected issues might result in significant expenses. It also helps with compliance and consumer happiness. To ensure business recovery and continuity, a strong business resilience plan must be created and tested on a regular basis. By improving recovery tactics and eventually accomplishing goals, following these stages gives the organization confidence in its ability to face future financial issues.

    Log in to Reply
  13. Alex Ruiz says

    October 22, 2023 at 11:20 pm

    A business impact analysis is the process to determine critical business processes and evaluate each’s potential effects of a disruption on regular business operations. It’s used to identify important business functions, assess the financial and operational impact of interruption on the organization and helps the organization prioritize resources and efforts for continuity planning and disaster recovery.
    Its needed because its the foundation for disaster recovery and without that you cannot build a good recovery plan to recover from disaster and will lead to an organization’s downfall following a disaster that could’ve easily been planned for and dealt with efficiently had there been an arrangement in place to recover.

    Log in to Reply
    • Akintunde Akinmusire says

      October 24, 2023 at 8:44 pm

      Hi Alex,
      I agree with you that it is important for a business to plan so that the organization can react accordingly when the issue arises. Planning will help the business understand the risks and also ways to mitigate them.

      Log in to Reply
  14. Michael Obiukwu says

    October 22, 2023 at 11:36 pm

    In reference to Unit 09 pertaining to Business Continuity and Disaster Recovery, it is pertinent to understand the concept of Business Impact Analysis (BIA). A BIA is a critical analytical tool implemented by businesses as part of their strategic planning process. Its primary function is to predict the consequences of disruption of business functions and processes, and therefore to provide a basis for investment in prevention and recovery.

    The significance of a BIA cannot be overstated; its purpose extends much beyond merely surveying potential loss. It encompasses evaluating various possible scenarios – from minor interruptions to major disasters – thereby providing an objective analysis of all potential threats, their consequential impacts, and a roadmap for recovery.

    The reason a BIA is considered indispensable is that it helps businesses understand critical functions that could affect their proficiencies and productivity. Risks can emanate from various sources – it could be a natural calamity, a cyber attack or even a sudden market shift. In the face of such unforeseeable incidents, BIA aids in building resilience, ensuring that the business can withstand, effectively manage, and recover from disruptive events.

    In conclusion, Business Impact Analysis is an essential tool to understand vulnerabilities, minimize business disruptions, plan for disaster recovery and maintain continuity. The acknowledgement and understanding of its importance is a significant stepping-stone in the path towards strategic business robustness.

    Log in to Reply
    • Ashley A. Jones says

      October 24, 2023 at 10:09 am

      I like this recap that you delivered, Michael. A BIA and DRP seem to be good reasons for someone specialized in ITACS to be brought onto a company, especially a company that is trying to scale or has already scaled and has resources tied up in keeping up with demand.

      Log in to Reply

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Weekly Discussions

  • Unit 01: Understanding an Organization's Risk Environment (5)
  • Unit 02: Case Study 1 – Snowfall and a stolen laptop (2)
  • Unit 02: Data Classification Process and Models (6)
  • Unit 03: Risk Evaluation (6)
  • Unit 04: Case Study 2 – Autopsy of a Data Breach – The Target Case (4)
  • Unit 05: Creating a Security Aware Organization (6)
  • Unit 06: Physical and Environmental Security (6)
  • Unit 08: Case Study 3 – A Hospital Catches the "Millennium Bug" (3)
  • Unit 09: Business Continuity and Disaster Recovery (6)
  • Unit 10: Network Security (6)
  • Unit 11: Cryptography, Public Key Encryption and Digital Signature (6)
  • Unit 12: Identity Management and Access Control (6)
  • Unit 13: Computer Application Security (6)
  • Welcome (1)

Copyright © 2025 · Course News Pro on Genesis Framework · WordPress · Log in