BIA: longest disruption time in BIA questionnaire
Greetings!
The BIA questionnaire in 22301 Document Toolkit lists disruption periods of 2 hours, 4 hours, 24 hours, 48 hours and 1 week. There are some processes that are, although fundamental in company's operation, prone by their nature to prolonged periods of disruption. And although disruption of those for one week has been valued as 3 (high impact) by the top management, the impact still wouldn't be catastrophic.
The question I have is: do I need to tweak the questionnaire to include longer periods of disruption, like 1 month, so that we actually define at what point the consequences are considered to become catastrophic for the company, of we can leave them be, because they are still valued as 3, so non-acceptable by nature, so it doesn't really matter whether it's 3 or 4, the Business Continuity Strategy wouldn't change from that?
Assign topic to the user
You can tweak the disruption periods in the questionnaire to fulfill your needs, but considering your case, the recommendation is for you to first check how many activities can support a longer periods of disruption, and which periods these would be, so you can adjust the questionnaire properly.
Please note that the shorter the period for the disruption to become catastrophic, the greater the resources and costs involved for continuity and recovery, so if your questionnaire defines disruption periods properly you will allocate your resources in a more efficient way.
This article will provide you a further explanation about performing BIA:
- How to implement business impact analysis (BIA) according to ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-implement-business-impact-analysis-bia-according-to-iso-22301/
Comment as guest or Sign in
Feb 08, 2020