Easy Data Recovery
Data Recovery Software, Tools, Methods, Reviews, Advice & More!
Business Continuity and Disaster Recovery - Business Impact Analysis
Article By: Robert Mahood
Business impact analysis is a critical part of the business continuity planning process. This step quantifies data and gets into the real world issue of potential losses that can negatively impact your business. It is used to understand the most important impacts and how to best protect your people, processes, data, communications, assets and the organization's goodwill and reputation.
Organizations often think in terms of disaster recovery. Business continuity and the business impact analysis is more focused on keeping the business up and running and less focused on recovery after a disaster. The business impact analysis also is not focused only on the potential disasters, but on all potentially critical discontinuities. Key elements of the Business Impact Analysis are to identify critical business functions, establish the maximum acceptable outage time for each of these functions and then to determine the impact of not performing those functions. This can be measured against regulatory, legal, financial, operations or customer service requirements.
Once the adequacy of security and controls is evaluated and critical business functions and outage times are defined, the business continuity planner needs to develop an understanding of the probability of threats factored by the severity or impact and to start to develop a cost benefit analysis of the largest impact and highest probability threats.
It's virtually impossible to create an absolute value and prioritization of threats and impacts. Generally, a relational system is used to drive out the key priorities. Often, each threat is evaluated according to its probability and assigned a 1, 5 or 10 rating. Then, each threat is evaluated according to its impact on critical business functions and on the business overall. For example, a discontinuity in a critical business function of less than one hour might receive a value of 0. A discontinuity of one to eight hours might be ranked a 1, eight to twenty four hours might be ranked a 2 and over 24 hours might be ranked a 3. Obviously, these rankings need to be developed on a company specific basis. Probability factored by impact creates the relational prioritization list.
This approach to risk evaluation and control allows management to start to quantify the risks and potential impacts on the organization in a thoughtful and analytical way. This results not only in higher quality decisions, but also provides an audit trail that demonstrates that management is paying attention to its risk management responsibilities. These responsibilities might be established by regulatory or legal bodies, demanded as a contractual commitment by customers or simply expected by shareholders as sound and prudent management. The key corporate goals are to protect people, protect assets, protect data and to protect the brand and reputation of the organization.
Organizations often think in terms of disaster recovery. Business continuity and the business impact analysis is more focused on keeping the business up and running and less focused on recovery after a disaster. The business impact analysis also is not focused only on the potential disasters, but on all potentially critical discontinuities. Key elements of the Business Impact Analysis are to identify critical business functions, establish the maximum acceptable outage time for each of these functions and then to determine the impact of not performing those functions. This can be measured against regulatory, legal, financial, operations or customer service requirements.
Once the adequacy of security and controls is evaluated and critical business functions and outage times are defined, the business continuity planner needs to develop an understanding of the probability of threats factored by the severity or impact and to start to develop a cost benefit analysis of the largest impact and highest probability threats.
It's virtually impossible to create an absolute value and prioritization of threats and impacts. Generally, a relational system is used to drive out the key priorities. Often, each threat is evaluated according to its probability and assigned a 1, 5 or 10 rating. Then, each threat is evaluated according to its impact on critical business functions and on the business overall. For example, a discontinuity in a critical business function of less than one hour might receive a value of 0. A discontinuity of one to eight hours might be ranked a 1, eight to twenty four hours might be ranked a 2 and over 24 hours might be ranked a 3. Obviously, these rankings need to be developed on a company specific basis. Probability factored by impact creates the relational prioritization list.
This approach to risk evaluation and control allows management to start to quantify the risks and potential impacts on the organization in a thoughtful and analytical way. This results not only in higher quality decisions, but also provides an audit trail that demonstrates that management is paying attention to its risk management responsibilities. These responsibilities might be established by regulatory or legal bodies, demanded as a contractual commitment by customers or simply expected by shareholders as sound and prudent management. The key corporate goals are to protect people, protect assets, protect data and to protect the brand and reputation of the organization.
Robert Mahood has significant technology and management experience in data communications, internet, storage, disaster recovery and data recovery. He is currently the president of Midwest Data Recovery. www.midwestdatarecovery.com
Disaster Data Recovery Resources
Getting to Grips with Windows NT Data Recovery
NT data recovery is the process of recovering data that was lost in the Windows NT operating system. Many people use NT to accomplish their daily tasks and also to do business. Companies count on the reliability...
Company Up and Running Just 2 Hours After Major Fire
You might think that something as major as a building fire could put a serious dent in the productivity of any office, to put it mildly. Destruction of property equipment, furniture and files are almost...
Safe and Secure Data Recovery
The government has a set of demands that strictly require procedures to have absolute security while data is being recovered from computer media that has become damaged and unreadable. Some facilities...
Understanding RAID data recovery
RAID data recovery is, of course, the act of recovering data from a RAID system. For those of you in the dark about what a RAID system is, I hope to shed a bit of light on the subject in this brief outline....
A Plain-Speaking NTFS Data Recovery Guide
NTFS data recovery is important for anyone using the NTFS system that has lost a file or set of files that were vital. In this brief article, I will outline simply the facts around NTFS data recovery and...
Categorizing & Organizing Electronic Data for Maximum Backup Efficiency
Most companies today, whether large or small, are experiencing data overload. According to industry studies, many organizations are finding that they have to double their storage capacities every six to...
Additional Disaster Data Recovery Related Resources...
Disaster Preparedness Panel Calls For Toronto-Wide Exercise (PR Web)
Disaster Recovery Information Exchange (DRIE) asks government, emergency responders and business community to share and integrate response practices. (PRWeb Mar 15, 2007) Post Comment:Trackback URL: http://www.prweb.com/zingpr.php/UHJvZi1Qcm9mLUZhbHUtU3VtbS1NYWduLVplcm8=
Disaster Recovery Information Exchange (DRIE) asks government, emergency responders and business community to share and integrate response practices. (PRWeb Mar 15, 2007) Post Comment:Trackback URL: http://www.prweb.com/zingpr.php/UHJvZi1Qcm9mLUZhbHUtU3VtbS1NYWduLVplcm8=
Huntington Hospital Implements Disaster Recovery Solution To Ensure Availability Of MEDITECH Healthcare Information ... (Business Wire Via Yahoo! Finance)
CANTON, Massachusetts----JJWild, a provider of integrated healthcare delivery solutions, announced today that Huntington Hospital of Pasadena, California has completed the installation of a state-of-the-art self-hosted disaster recovery solution to protect its MEDITECH Healthcare Information System in the event of a disaster.
CANTON, Massachusetts----JJWild, a provider of integrated healthcare delivery solutions, announced today that Huntington Hospital of Pasadena, California has completed the installation of a state-of-the-art self-hosted disaster recovery solution to protect its MEDITECH Healthcare Information System in the event of a disaster.
SafeData Doubles Revenues In Rapidly Growing Backup And Data Recovery Market (PR Newswire Via Yahoo! Finance)
SafeData, LLC, a technology company focused on helping companies protect their data, minimize downtime and recover and restore data quickly, today announced that it has experienced significant growth, doubling its business in the past year.
SafeData, LLC, a technology company focused on helping companies protect their data, minimize downtime and recover and restore data quickly, today announced that it has experienced significant growth, doubling its business in the past year.
Silver Peak Joins The Network Appliance Partner Program To Provide Customers With Secure Data Replication And Disaster ... (PR Web)
Silver Peak Systems, Inc. ( www.silver-peak.com ), a leading provider of scalable Wide Area Network (WAN) acceleration solutions, today announced membership in the NetApp Partner Program to improve the performance and security of data replication and recovery across the WAN. The Silver Peak and NetApp collaboration provides a solution for data protection that reduces the risk of exposure from ...
Silver Peak Systems, Inc. ( www.silver-peak.com ), a leading provider of scalable Wide Area Network (WAN) acceleration solutions, today announced membership in the NetApp Partner Program to improve the performance and security of data replication and recovery across the WAN. The Silver Peak and NetApp collaboration provides a solution for data protection that reduces the risk of exposure from ...
MiraLink Addresses Real-Time Disaster Recovery At Data Protection Summit 2007 (Business Wire Via Yahoo! Finance)
IRVINE, Calif.----MiraLink Corporation, the proven expert in remote disaster recovery solutions, today announced that MiraLink will be demonstrating the MiraLink 500 disaster recovery appliance with IBM Tivoli Continuous Data Protection for Files at the Data Protection Summit 2007.
IRVINE, Calif.----MiraLink Corporation, the proven expert in remote disaster recovery solutions, today announced that MiraLink will be demonstrating the MiraLink 500 disaster recovery appliance with IBM Tivoli Continuous Data Protection for Files at the Data Protection Summit 2007.
