GRC - Business Continuity Management > Defining a Business Impact Analysis > BIA Characteristics
BIA Characteristics
 
Name
BCM System
Entity
Processes
BIA Responsible
Status
Creation date
Completion date
Closure date
Find below the general characteristics of a BIA (Business Impact Analysis).
See also:
Name
The name of a a BIA is built as follows: “Entity Name” > “Process Name”.
BCM System
BCM system from which a BIA is performed.
*A BCM (Business Continuity Management) System enables to define the scope of a Business Continuity Plan. It also enables to launch Business Impact Analyses.
Entity
Root entity of the BCM System the BIA belongs to.
Processes
Indicates the process category analyzed within the framework of the BIA. It represents the BIA scope.
*This field is in Read-only mode.
BIA Responsible
The BIA responsible user is in charge of the process and answers questions about business continuity.
As a GRC manager, you must send him/her the BIA so that he answers questions.
Once the BIA has been sent to the BIA responsible user, the BIA status turns to “Ongoing”.
*The BIA responsible user generally logs in to HOPEX with the “GRC Contributor” profile.
In the HOPEX GRC desktop, you can access the BIAs that have been sent to you via Continuity > Business Impact Analysis (My BIAs drop-down menu).
Status
 
BIA status
Meaning of the status
Draft
Default status of a BIA at creation
Ongoing
An e-mail has been sent to the BIA responsible user.
He/she is requested to fill in a BIA matrix.
Completed
The RTO and business impact have been computed.
Closed
The Analysis and Results page of the BIA are now in read-only mode.
Creation date
Date when the GRC Manager created the Business Impact Analysis.
Completion date
Date when the BIA Responsible answered questions via the matrix.
The following indicators are computed:
• RTO
*The Recovery Time Objective (RTO) determines the maximum tolerable amount of time it takes to bring critical systems back online, possibly in a Degraded Mode. It is related to downtime, representing target time following an incident for Product or service delivery resumption, or Activity resumption, or Resources recovery.
• Business impact
*A business impact is the outcome of a disruption.
Closure date
Date when the GRC Manager validated the BIA results (that is to say the matrix answers).