GRC - Business Continuity Management > Defining a Business Impact Analysis > Purpose of a BIA (Business Impact Analysis)
Purpose of a BIA (Business Impact Analysis)
A Business Impact Analysis is the “process of analyzing the impact over time of a disruption on the organization”. (ISO 22300:2021)
The purpose is to identify critical process categories for which you need to implement a Business Continuity Plan (BCP).
Process responsible users (BIA responsible users) must fill in a matrix to qualify the impact of the disruption (for each impact type and downtime period).
This matrix enables to compute, for each process:
• the RTO
*The Recovery Time Objective (RTO) determines the maximum tolerable amount of time it takes to bring critical systems back online, possibly in a Degraded Mode. It is related to downtime, representing target time following an incident for Product or service delivery resumption, or Activity resumption, or Resources recovery.
• the business impact
*A business impact is the outcome of a disruption.
See also: