ABSTRACT

Business impact analysis (BIA) focuses on the examination of business processes, the interdependencies of both upstream and downstream and the criticality of these processes on the yardstick of time and data loss. Risk assessment (RA) covered threats, vulnerabilities, and the loss suffered if they materialize. The report must give a holistic picture of business impact and risks faced by the business, and to build a successful business case to be presented to the top management. A BIA report must consider the internal and external environments that impact the business as also the risks affecting the financial viability and market standing of the organization. The management report must contain workaround procedures available for critical processes that have been identified by business units for further discussion during the final meeting. Effectiveness of the business impact analysis is reflected by the management's commitment of people and technological resources to mitigate risks of business continuity projected by the findings.