What Goes Into a Valuable Impact Analysis?
It is no secret that a Business Continuity Plan (BCP) is an important document to have in your arsenal, especially when responding to events, such as natural disasters or cyber attacks, that may interrupt or halt business operations. As with other critical areas of Information Security, to build a valuable BCP, you need to start with a risk assessment. In the case of BCP, that risk assessment is called a Business Impact Analysis (BIA). A good BIA helps you to make important recovery decisions, specifically which business processes should you restore first (and in what order), and what is needed to restore those business processes. So how do you build such a valuable BIA?