Business Impact Assessment Template

Tags

plan

You must be logged in to download this document

1 reviews

banter

BIA Template BIA Instructions 1 Please do not adjust the formatting of any cells, as validation and formatting restrictions have been implemented. This extends to ensuring no columns are inserted into the BIA 2 The 'Blue questions' require a response while the 'yellow questions' are automatically calculated based on prior responses. The Yellow fields will automatically update with ratings, please do not over write these calculations. 3 The key activities should form part of a key process within your area. To help keep this as clear as possible please ensure that you use a new worksheet for each of the key processes. 4 Please ensure that for an event which can cause the activity to Fail are separately recorded on individual rows 5 When responding to 'Severity' and 'Likelihood /Occurrence' questions, refer to the 'Risk Ratings' worksheet attached at the end of the template for the relevant values. Each row is required to have values entered. 6 Answer all descriptive questions as concisely as possible. Where a response is not known, please respond by saying 'unknown'. Guidance for completing the Business Impact Assessment (BIA) The following information should be considered when completing the BIA template:BIA Template {Business Process} BIA Business Unit: Response Prepared By: Project Sponsor Response Date: Key Activities Critical Time Periods Potential Failure Events Severity Current controls Likelihood /Occurrence Maximum Tolerable Outage (hrs) Residual Risk Business Priority 4 hours 1 Day 1 Week 4 hours 1 Day 1 week 4 hours 1 Day 1 week 4 hours 1 Day 1 week 00000000 Business Impact Assessment 4/26/2004 Dependencies Impact to Organisation Briefly describe the main activities within this business process (one activity per row) What are the key activity dependencies? Please be specific What are the most critical time periods for the business activity? (i.e. Daily, End of Week, Month-end, Quarter-end, Year-end, Other) Describe how the activity is able to fail (one instance per row) Please rate the impact severity on customer service if the activity was unable to be undertaken? (refer to 'Risk Ratings') What controls are currently in place to prevent /mitigate the event from occurring? What is the likelihood /frequency that the event may occur? (refer to 'Risk Ratings') Please specify the impact to organisation if the activity could not be undertaken What is the maximum timeframe that the business process could be suspended in the event of a disaster? (max of 1 week = 168 hours) = Severity x Occurrence Calculated based on Residual risk score IT -Servers IT -Applications Plant Machinery Resources (FTE's) Other Activities Locations /Site Other Financial What is the expected financial loss ($) if the activity could not be performed? Consider revenue, public relations, consultant fees etc Intangible Please rank the impacts (0 -5, where 0 = no impact, 5 = catastrophic impact) that will occur if each business activity is interrupted for the time periods stated below Reputation If the business activity cannot be performed the ability to maintain corporate image will be adversely affected. Legal obligations Legal /regulatory requirements would not be met if the activity could not be performed Customer Service Customer service would be impacted if the business activity was not available during a disaster. Where possible, identify in the space below those entities which will be affected the most. Operational Efficiency Operating efficiency of the business activity would be impacted if the activity could not be performed following a disaster. 2 of 4BIA Template Risk Ratings RATING SEVERITY Risk Profile LIKELIHOOD OF OCCURRENCE Risk Profile 1 Customer will not notice the adverse effect on customer services Insignificant -No delay, low financial loss, no impact on business processes Likelihood of occurrence is remote. Approx 1 time in 2-3 years Rare -May occur only in exception circumstances 2 Delay in operations, however customer services will not be impacted Minor -Minimal delay, medium financial loss, minor impact on business processes Occasional failure rate. Approx 1-2 occurrences in 18 months Unlikely -Could occur at some time 3 Moderate delay in ability to provide customer service within required timeframes Moderate -delay in critical path, high financial loss, medium impact on business processes Relatively moderate failures rate. Approx 3-4 occurrences in 12 months Possible -Might occur at some time 4 Long delay in customer services being able to be provided within required timeframes and contractual penalties may apply. Impacts the ability to retain customer. Major -Major delay in critical path, major financial loss, medium impact on critical business processes Relatively high failure rate. Approx 5-6 failure occurrences in 12 months Likely -will probably occur in most circumstances 5 Significant customer dissatisfaction and contractual penalties would/have been applied. Likely to result in loss of customer Catasrophic -Project cannot deliver, huge financial loss, major impact on critical business process Significantly high failure rate. Greater than 6 times in 12 months Almost Certain -is expected to occur in most circumstancesISO RISK MATRIX Insignificant Minor Moderate Major Catastrophic LIKELIHOOD Level 1 2 3 4 5 Almost Certain 5 H H H E E Likely 4 M H H E E E 7 Possible 3 L M H E E H 9 Unlikely 2 L L M H E M 4 Rare 1 L L M H H L 5 E Extreme risk, immediate action required H High risk, senior management attention needed M Moderate Risk, management responsibility must be specified L Low risk, manage by routine procedures PMP RISK MANAGEMENT CLASSIFICATIONS High M H E Medium L M H Low A L M Low Medium High E Action Immediately H Action after all HH are completed M Delegate and Monitor closely L Delegate A Monitor Mapping Options Option 1 1 2 3 4 5 Level L M M H H 5 H M H H E E E 4 4 H M H H E E H 8 3 M L M M H H M 8 2 M L M M H H L 4 1 L A L L M M A 1 Option 2 1 2 3 4 5 Level L L M M H 5 H M M H H E E 1 4 M L L M M H H 4 3 M L L M M H M 8 2 L A A L L M L 8 1 L A A L L M A 4 Option 3 1 2 3 4 5 Level L L M H H 5 H M M H E E E 4 4 H M M M E E H 4 3 M L L M H H M 9 2 L A A L M M L 4 1 L A A L M M A 4 SEVERITY impact LIKELIHOOD impact LIKELIHOOD impact LIKELIHOOD Probability Impact