Benefit of perfoming BIA for a single department
Assign topic to the user
You should perform BIA for each of your activities/departments separately, because very likely different activities will have different MAO (Maximum Acceptable Outage)/RTO (Recovery Time Objective), and different resources. Therefore, by merging them all into one single BIA won't give precise results.
Read also this article: How to define activities when implementing business continuity according to ISO 22301 https://advisera.com/27001academy/blog/2013/11/11/how-to-define-activities-when-implementing-business-continuity-according-to-iso-22301/
One doubt is , RTO is only for application or for process.
RTO could be set for either of them, but usually it is set for the whole activity (i.e. process or a department).
Comment as guest or Sign in
Jan 12, 2016